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OMB MANAGEMENT WATCH LIST: $65 BILLION 
REASONS TO ENSURE THE FEDERAL GOV- 
ERNMENT IS EFFECTIVELY MANAGING IN- 
FORMATION TECHNOLOGY INVESTMENTS 


THURSDAY, APRIL 21, 2005 

House of Representatives, 
Committee on Government Reform, 

Washington, DC. 

The committee met, pursuant to notice, at 10:10 a.m., in room 
2154, Rayburn House Office Building, Hon. Tom Davis (chairman 
of the committee) presiding. 

Present: Representatives Davis, Porter, Merchant, Waxman, 
Cummings, Kucinich, Watson, Ruppersberger, and Norton. 

Staff present: Melissa Wojciak, staff director; David Marin, dep- 
uty staff director/communications director; Rob White, press sec- 
retary; Drew Crockett, deputy director of communications; Victoria 
Proctor, senior professional staff; Jaime Hjort, professional staff 
member; Teresa Austin, chief clerk; Sarah D’Orsie, deputy clerk; 
Corinne Zaccagnini, chief information officer; Chas Phillips, policy 
counsel; Kristin Amerling, minority deputy chief counsel; Karen 
Lightfoot, minority communications director, senior policy advisor; 
Adam Bordes and Nancy Scola, minority professional staff mem- 
bers; Earley Green, minority chief clerk; and Jean Gosa, minority 
assistant clerk. 

Chairman Davis. Good morning. A quorum being present, the 
committee will come to order. 

I want to welcome everybody to today’s hearing on the OMB 
watch list. The President’s fiscal year 2006 IT budget request for 
the Federal Government is over $65 billion, and that figure is ex- 
pected to rise continually throughout the rest of the decade. Given 
this fact, it is essential that the Federal Government manage IT in- 
vestments efficiently. The Federal Government must acquire sys- 
tems and services that not only provide the highest quality for Gov- 
ernment employees, but also provide the best value for the tax- 
payer dollar. 

tinder the Clinger-Cohen Act, OMB is required to establish proc- 
esses to analyze, track, and evaluate the risks and results of major 
capital investments in information systems made by Federal agen- 
cies. For fiscal year 2005, OMB established a management watch 
list of mission-critical projects that have exhibited shortfalls in per- 
formance measures, project management, IT security, or overall 
justification. According to OMB’s testimony before this committee 
last year, agencies with projects on the watch list are required to 

( 1 ) 



2 


correct weaknesses and deficiencies or risk 0MB placing limits on 
their spending. 

Of the $60 billion dedicated for Federal IT spending in fiscal year 
2005, $22 billion represented projects on the watch list. This is over 
half of all Federal IT initiatives. This year there are more than 
1,000 IT projects. 0MB reported there are 342 projects, represent- 
ing about $15 billion on the watch list. This represents a signifi- 
cant improvement, one I hope we can continue. 

I want to commend 0MB for creating this management tool to 
address significant challenges facing the Federal Government. But 
at the same time, I want to make sure that it is being used effec- 
tively. There is some concern that 0MB has not fully exploited the 
opportunity to use the watch list as a tool for analyzing IT invest- 
ments on a government-wide basis. I am concerned that there is no 
aggregate list, per se. 

It is my understanding that 0MB did not develop a single list 
of projects meeting their watch list criteria, but instead relied on 
individual analysts to evaluate the agencies and simply compile the 
results. Without a comprehensive list of projects and their identi- 
fied weaknesses, we are apprehensive about OMB’s ability to effec- 
tively followup with these agencies to determine whether they have 
addressed the weaknesses associated with projects on the watch 
list. 

Now today’s primary purpose is to get a better understanding of 
OMB’s use of the watch list. In particular, the committee is inter- 
ested in determining if the concept of the watch list could be more 
effectively utilized by the Federal Government as a tool to manage 
information technology investments. Additionally, the committee 
looks forward to learning how 0MB coordinates with individual 
agencies to identify and resolve IT-related challenges. 

In a report requested by the committee last year, the GAO evalu- 
ated OMB’s processes regarding placing projects on the watch list 
and following up on corrective actions established for projects on 
the watch list. GAO will be releasing this report to the public 
today, and we look forward to discussing the results of their re- 
search. 

We have two distinguished panels of witnesses. Our first panel, 
we will hear from Karen Evans again from 0MB, and David 
Powner from the Government Accountability Office, and we will 
discuss the watch list from a government-wide perspective. Our 
second panel features representatives from the Department of 
Transportation, Housing and Urban Development, Energy, and 
Veterans Affairs. These representatives will explain the nature of 
their projects on the watch list as well as efforts they have taken 
to resolve the issues that have led to their placement on the watch 
list. 

I want to welcome the witnesses to today’s hearing. I look for- 
ward to your testimony. 

[The prepared statement of Chairman Tom Davis follows:] 
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“0MB Management Watch List: $65 BilKon Reasons to Ensure the Federal Government is 
Effectively Managing Information Technology Investments” 

Opening Statement of Chairman Davis 
Thursday, April 21, 2005, 10:00 a.m. 

Room 2154 Rayburn House Office Building 

Good morning. A quorum being present, the Committee on Government Reform will come to 
order. I would like to welcome everyone to today’s hearing on the 0MB Watch List. 

The President’s fiscal year 2006 IT budget request for the Federal government is over $65 
billion, and that figure is expected to rise continually throughout the rest of the decade. Given 
this fact, it is essential that the Federal government manage IT investments efficiently. The 
Federal government must acquire systems and services that not only provide the highest quality 
for government employees but also provide the best value for the taxpayer dollar. 

Under the Clinger-Cohen Act. the Office of Management and Budget (0MB) is required to 
establish processes to analyze, track, and evaluate the risks and results of major capital 
investments in information systems made by Federal agencies. For the fiscal year 2005 budget, 
OMB established a “Management Watch List” of mission-critical projects that have exhibited 
shortfalls in performance measures, project management, IT security, or overall Justification. 
According to OMB’s testimony before this committee last year, agencies with projects on the 
Watch List are required to correct weaknesses and deficiencies or risk OMB placing limits on 
their spending. 

Of the $60 billion dollars dedicated for Federal IT spending in FY05, $22 billion represented 
projects on the Watch List - this is over half of all federal IT initiatives. This year there are 
more than 1000 IT projects. OMB reported that there are 342 projects, representing about $15 
billion dollars, on the Watch List. This represents a significant improvement, one I hope we can 
continue. 

I commend OMB for creating this management tool to address significant challenges facing the 
federal government, but at the same time. I want to make sure that it’s being used effectively. 
There is some concern that OMB has not fully exploited the opportunity to use the Watch List as 
a tool for analyzing IT investments on a government-wide basis. 1 am concerned that there is no 
aggregate list per se. It is my understanding that OMB did not develop a single list of projects 
meeting their Watch List criteria and instead relied on individual analysts to evaluate the 
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agencies and simply compile the results. Without a comprehensive list of projects and their 
identified weaknesses, I am apprehensive about OMB’s ability to effectively follow up with 
these agencies to determine whether they have addressed the weaknesses associated with projects 
on the Watch List. 

The primary purpose of today’s hearing is to get a better understanding of OMB’s use of the 
Watch List. In particular, the Committee is interested in determining if the concept of the Watch 
List could be more effectively utilized by the federal government as a tool to manage 
information technology investments. Additionally, the Conunittee looks forward to learning 
how OMB coordinates with individual agencies to identify and resolve IT-related challenges. 

In a report requested by this Committee last year, the Government Accountability Office 
evaluated OMB’s processes regarding (1) placing projects on the Watch List and (2) following 
up on corrective actions established for projects on the Watch List. GAO will be releasing this 
report to the public today. We look forward to discussing the results of their research. 

We have two distinguished panels of witnesses before us today. On the first panel we will hear 
from Karen Evans from the Office of Management and Budget, and David Powner from the 
Government Accountability Office, who will discuss the Watch List from a government-wide 
perspective. Our second panel features representatives from the Departments of Transportation, 
Housing and Urban Development, Energy and Veterans Affairs, These representatives will 
explain the nature of their projects on the Watch List as well as the efforts they have taken to 
resolve the issues that have placed their projects on the Watch List. 

I welcome all of the witnesses to today’s hearing and look forward to their testimony. 
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Chairman Davis. Mr. Waxman. 

Mr. Waxman. Thank you, Mr. Chairman. I am pleased that the 
committee is continuing its efforts to oversee the way in which the 
Federal Government is managing its information technology invest- 
ments. The Federal Government has made a considerable invest- 
ment in information technology. The President’s budget for fiscal 
year 2006 includes more than 1,000 major IT projects that will cost 
the Federal Government more than $65 billion. 

The White House Office of Management and Budget has a statu- 
tory responsibility to evaluate and track the Federal Government’s 
enormous investment in information technology. Unfortunately, it 
is not meeting its responsibility. 

For the past few years, 0MB has been reporting that it tracks 
problem IT projects on what it calls a management watch list. Last 
year, 0MB reported that more than a third of the Federal Govern- 
ment’s major IT projects were on this list. However, when members 
of this committee asked 0MB to provide basic information on what 
specific projects were on the watch list and how it was being used, 
0MB was not responsive. 

It is difficult to have confidence that 0MB is fulfilling its respon- 
sibilities to monitor IT spending by the Federal Government when 
0MB fails to provide essential information about its tracking meth- 
odology. 

Now, GAO has taken a closer look at the management watch list 
and it has found that 0MB does not maintain an aggregate list of 
troubled projects. Rather, what 0MB calls its watch list is an ad 
hoc compilation of lists maintained by a few individual 0MB ana- 
lysts. No business with $65 billion at stake would ever manage 
itself this way. But apparently, different standards are fine when 
it is taxpayer money at risk. 

GAO is recommending that 0MB create and maintain a govern- 
ment-wide watch list concerning major Federal IT projects to pro- 
vide a mechanism for tracking whether problems that have been 
identified in any given year have been addressed. Incredibly, the 
administration is opposing even this minimal level of responsibil- 
ity. I understand 0MB disagrees with this recommendation. 

I know we can do better. And I look forward to hearing from to- 
day’s witnesses about the merits of having an aggregate manage- 
ment watch list so that we can gain understanding of how 0MB 
and other individual Government agencies can improve manage- 
ment of Federal information technology projects. 

Mr. Chairman, I want to make the comment to our witnesses, on 
the floor today is the energy bill that has come out of primarily the 
Energy and Commerce Committee and this committee. Later, we 
will have an amendment from this committee. Unfortunately, I am 
not going to be here for a lot of the testimony, but I will have a 
chance to review the testimony, and my staff, of course, is here to 
follow the issue very carefully. 

[The prepared statement of Hon. Henry A. Waxman follows:] 
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Statement of 

Rep. Henry A. Waxman, Ranking Minority Member 
Committee on Government Reform 
Hearing on “OMB Management Watch List: $65 Billion 
Reasons to Ensure the Federal Government is Effectively 
Managing Information Technology Investments” 

April 21, 2005 


Thank you, Mr. Chairman. I am pleased that the Committee 
is continuing its efforts to oversee the way in which the federal 
government is managing its information technology investments. 

The federal government has made a considerable investment 
in information technology. The President’s budget for fiscal year 
2006 includes more than a thousand major IT projects that will 
cost the federal government more than $65 billion. 

The White House Office of Management and Budget has a 
statutory responsibility to evaluate and track the federal 
government’s enormous investment in information technology. 
Unfortunately, it is not meeting this responsibility. 
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For the past few years, 0MB has been reporting that it tracks 
problem IT projects on what it calls a “Management Watch List.” 
Last year, OMB reported that more than a third of the federal 
government’s major IT projects were on this list. However, when 
members of this Committee asked OMB to provide basic 
information on what specific projects were on the “watch list” and 
how it was being used, OMB was not responsive. 

It is difficult to have confidence that OMB is fulfilling its 
responsibilities to monitor IT spending by the federal government 
when OMB fails to provide essential information about its tracking 
methodology. 

Now, GAO has taken a closer look at the “Management 
Watch List,” and it has found that OMB does not maintain an 
aggregate list of troubled projects. Rather, what OMB calls its 
“watch list” is an ad hoc compilation of lists maintained by a few 
individual OMB analysts. 
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No business with $65 billion at stake would ever manage 
itself this way. But apparently, different standards are fine when 
it’s taxpayer money at risk. 

GAO is recommending that 0MB create and maintain a 
govemmentwide watch list of concerning major federal IT projects 
to provide a mechanism for tracking whether problems that have 
been identified in any given year have been addressed. Incredibly, 
the Administration is opposing even this minimal level of 
responsibility. I understand 0MB disagrees with this 
recommendation. I know we can do better. And I look forward to 
hearing from today’s witnesses about the merits of having an 
aggregate “Management Watch List” so that we can gain 
understanding of how 0MB and the other individual government 
agencies can improve management of federal information 
technology projects. 
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Chairman Davis. Thank you. We have a Davis-Waxman amend- 
ment and at least one of us is going to have to be there for that. 

Mr. Waxman. Better you. 

Chairman Davis. Any other Members wishing to make opening 
statements? If not, I am going to swear in the first panel. If you 
would rise with me and raise your right hands. 

[Witnesses sworn.] 

Chairman Davis. Let the record reflect that all witnesses re- 
sponded in the affirmative. 

Mr. Powner, who is the gentleman behind you so we can identify 
him for the record? 

Mr. Powner. Mr. Lester Diamond, Assistant Director. 

Chairman Davis. Thank you very much for being here. I look for- 
ward to your testimony. 

Karen, why not start with you, and then we will go to Mr. 
Powner. If you can keep it to 5 minutes. But it is a short panel, 
I want to make sure you get everything in. Your entire statement 
is part of the record. Thank you. 

STATEMENTS OF KAREN EVANS, ADMINISTRATOR, ELEC- 
TRONIC GOVERNMENT AND INFORMATION TECHNOLOGY, 

OFFICE OF MANAGEMENT AND BUDGET; DAVID POWNER, DI- 
RECTOR, INFORMATION TECHNOLOGY MANAGEMENT 

ISSUES, GOVERNMENT ACCOUNTABILITY OFFICE, ACCOM- 
PANIED BY LESTER DIAMOND, ASSISTANT DIRECTOR 

STATEMENT OF KAREN EVANS 

Ms. Evans. Good morning, Mr. Chairman and members of the 
committee. My remarks will focus on the administration’s strategy 
and progress to date in planning, managing, and measuring the re- 
sults of the Government’s technology investments. You asked me to 
specifically address OMB’s use of the tool we refer to as the man- 
agement watch list, and I will do so, but first I will discuss the 
overall context within which this list and our many other oversight 
tools are used. 

For fiscal year 2006, the President is proposing to spend roughly 
$65 billion for information technology and associated services to 
support the multiple and wide-ranging missions of the Federal 
Government. These IT investments help improve the ability of the 
Government’s programs and operations to more effectively deliver 
services, products, and information. 

0MB executes its responsibility using various methods such as 
reviewing agencies’ annual budget submissions, remaining engaged 
with agencies throughout the year using the President’s manage- 
ment agenda, and issuing policies and guidance. Each year, 0MB 
updates issues and guidance to the agencies on preparing their 
budget submissions as well as instructions on budget execution. 

Of the more than 40 sections within our guidance, 2 provide spe- 
cific additional guidance about IT funding requests. These sections 
provide guidance for Federal capital assets. To submit an invest- 
ment request for a major IT project, agencies must use the exhibit 
300, also called Capital Asset Plan and Business Case. 

Please note, business cases are primarily planning documents 
and used an indicator, but it is not a measurement of the agency’s 
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ability to execute or manage an IT project. This is an important 
distinction. 0MB reviews and evaluates business cases as part of 
its overall evaluation of the entire agency budget submission. If, 
based upon OMB’s evaluation, a business case does not successfully 
meet the evaluation criteria, it is placed on the management watch 
list. 

The information included in each business case helps 0MB and 
the agencies ensure correctly planned IT investments. The Presi- 
dent’s budget for fiscal year 2005 included approximately 1,200 
major IT projects, totaling about $60 billion. Of this number, 0MB 
reported slightly over half, 621 projects, representing about $22 bil- 
lion, as being on the management watch list. 

In my March 3rd testimony of last year about the Federal IT 
portfolio, I described this list as consisting of mission-critical 
projects needing improved overall justification, performance meas- 
ures, project management, or IT security. Agencies were required 
to correct identified project weaknesses and business case defi- 
ciencies. Those failing to do so were subject to additional oversight 
and requirements prior to spending. We did place conditions on 
agency spending in five instances last year. 

This year we continue to use the management watch list as one 
of the many tools to oversee agencies’ planning for IT investments 
and drive improved portfolio management. A total of 1,087 business 
cases were submitted this year and less than one third, 342, valued 
at approximately $15 billion, did not meet the criteria for success. 
In November 2004, the 342 investments were placed on this year’s 
management watch list. As they did last year, agencies have until 
the end of the fiscal year to correct all deficiencies or risk limits 
on their spending. I am pleased to report that this year’s list cur- 
rently at this time has been reduced to 248 projects. 

Let me now describe how other tools are used to monitor actual 
project execution and performance. In doing so, one will see, as 
0MB does, over-emphasis on the management watch list may lead 
to unintended consequences. 

Although business cases include information design to identify 
whether the agency appropriately considered project performance 
as part of the project planning, they are but a snapshot in time and 
they are not designed to be nor are they used for measuring project 
performance. Managing and measuring project performance is first 
and foremost an agency responsibility. 0MB then oversees the 
agencies’ activities under the President’s management agenda and 
its associated quarterly reporting process. 

Each agency receives a scorecard about their progress and their 
status in achieving the government-wide goals, such as achieving 
10 percent of cost, schedule, and performance for their IT portfolio. 
We deliberately included the criterion for “acceptable business 
cases” to underscore the need for good capital planning processes 
to be in place within an agency in order to produce good business 
cases. 

However, we recognize the business case as an output measure- 
ment. The acceptability of the business cases is just one of a num- 
ber of the critical components agencies must satisfy to get to green 
or yellow for the E-Government scorecard. If the business case cri- 
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teria are not successfully met, agencies cannot move forward re- 
gardless of their performance on other elements. 

Followup is dependent on particular issues identified and tends 
to focus on strategic issues or problems existing at a government- 
wide or agency-wide programmatic level, not tactical ones residing 
with an individual investment. 

I appreciate the opportunity to discuss the administration’s strat- 
egy in this area. The management watch list represents just one 
example of such opportunity and helps call attention to concerns 
within the planning for major IT projects. I will be happy to an- 
swer any questions at the appropriate time. 

[The prepared statement of Ms. Evans follows:] 



12 


STATEMENT OF 

THE HONORABLE KAREN EVANS 
ADMINISTRATOR FOR ELECTRONIC GOVERNMENT AND 
INFORMATION TECHNOLOGY 
OFFICE OF MANAGEMENT AND BUDGET 
BEFORE THE 

COMMITTEE ON GOVERNMENT REFORM 
U.S. HOUSE OF REPRESENTATIVES 

April 21, 2005 


Good morning, Mr. Chairman and Members of the Committee. Thank you for 
inviting me to speak about “OMB’s Management Watch List and the $65 billion Reasons 
to Ensure the Federal Government is Effectively Managing Information Technology (IT) 
Investments.” My remarks will focus on the Administration’s strategy and progress to 
date in planning, managing, and measuring the results of the Federal government’s IT 
investments. 

You asked me to specifically address OMB’s use of the tool we refer to as the 
“management watch list” and I will do so, but first I will discuss the overall context 
within which this list and our many other oversight tools are used. 

Managing the Government- wide Information Technology Portfolio 

As the title of this hearing suggests, this year, the President is proposing to spend 
roughly $65 billion for information technology (IT) and associated support services to 
support the multiple and wide-ranging missions of the Federal government. These IT 
investments help improve the ability of the government’s programs and operations to 
more effectively deliver services, products, and information to state, local, and tribal 
governments, industry, non-profit organizations, and the American people. 

A key component of OMB’s mission is to assist the President in overseeing the 
preparation of the Federal budget, supervise budget administration in Executive branch 
agencies, and promote orderly agency management. Within this overall mission, we 
provide guidance for and oversee the plaiming, implementation, and management of 
investments pursuant to existing law and policy such as, the Clinger-Cohen Act of 1996. 
At its highest level, the Clinger-Cohen Act requires 0MB to: 

• Establish processes for executive agencies to analyze, track, and evaluate the risks 
and results of major capital investments for information systems, and 

• Report on the net program performance benefits achieved by executive agencies as a 
result of major capital investments in information systems. 
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The Clinger-Cohen Act assigns agencies the responsibility for implementing 
OMB policies through effective capital planning and performance- and results-based 
management. 

OMB executes its responsibilities using various methods such as reviewing 
agencies’ annual budget submissions, remaining engaged with agencies throughout the 
year, and issuing policies and guidance as well as the President’s Management Agenda. 

OMB Circular A-11 and the Budget Process 

Each year, OMB updates and issues Circular A-11, “Preparation, Submission, and 
Execution of the Budget” to provide guidance to agencies on preparing their budget 
submission as well as instructions on budget execution. Agency submissions must reflect 
the policies of the President, including implementation of the President’s Management 
Agenda initiatives. 

Of the more than 40 sections within A- 1 1 , just two provide specific additional 
guidance about IT funding requests, i.e., section 53, “Information Technology and E- 
Govemment” and section 300, “Planning, Budgeting, Acquisition, and Management of 
Capital Assets.” These sections provide guidance for agency planning, budgeting, 
acquisition, and management of Federal capital assets. They instruct agencies on: 

• budget justification and reporting requirements for major IT investments 
in areas such as spending and funding plans; 

• performance goals and measures; 

• project management plans, goals, and progress; and 

• IT security plans and progress. 

To submit an investment request for a major IT project, agencies must use the “exhibit 
300,” also called the “Capital Asset Plan and Business Case” (business case). 

Please note business cases are primarily planning documents and not a fulsome 
measurement of agency execution or management of a major IT project. This is an 
important distinction. OMB reviews and evaluates business cases as part of its overall 
evaluation of the entire agency budget submission. Euphemistically, we have referred to 
this business case evaluation process as “scoring.” Circular A-11 specifies the evaluation 
criteria for each of the following ten areas: 

1 . Supports the President's Management Agenda Items 

2. Performance Goals 

3. Program Management 

4. Alternatives Analysis 

5. Risk Management 

6. Acquisition Strategy 

7. Performance Based Management System 

8. Life Cycle Costs Formulation 

9. Enterprise Architecture 
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10. Security and Privacy 

In addition to OMB’s evaluations, forFY2006 IT funding requests, we requested 
agencies to first self-evaluate their business cases against the criteria for each of the areas 
listed above and provide the results of their review as part of their budget submission. 
This was intended to enable an agency to demonstrate to its own management and then 
to OMB the agency has the proper processes and procedures in place to develop a strong 
business case for each investment involving the appropriate management review and 
approval. If, based upon OMB’s evaluation, a business case does not successfully meet 
the criteria it is placed on the “management watch list.” 


The Management Watch List In FY2005 and FY2006 

As I have said, the information included in each business case helps OMB and the 
agencies ensure correctly planned IT investments. The President’s Budget for Fy2005 
included approximately 1200 major FT projects, totaling about $60 billion. Of this 
number, OMB reported slightly over half — 621 projects, representing about $22 billion — 
as being on a “management watch list.” 

In my March 3, 2004 testimony about the Federal IT portfolio, I described this list 
as consisting of mission-critical projects needing improved overall justification, 
performance measures, project management, or IT security. Agencies were required to 
correct identified project weaknesses and business case deficiencies. Those failing to do 
so were subject to additional oversight and requirements prior to spending. We did place 
conditions on agency spending in five instances last year. 

This year we continue to use the “management watch list” as one of many tools to 
oversee agencies’ planning for IT investments and drive improved portfolio management. 
The FY2006 President’s budget proposes approximately $65 billion for IT and associated 
support services. A total of 1,087 business cases were submitted this year and less than 
one third (342), valued at approximately $15 billion, did not meet the criteria for success. 
In November 2004, the 342 investments were placed on this year’s management watch 
list. As they did last year, agencies have until the end of the fiscal year to correct all 
deficiencies or risk limits on their spending. Last week, we concluded our 2“'* quarter 
PMA scorecard reviews and I am pleased to report this year’s list has been reduced to 
248 projects. 

It is important to note, OMB is but one of the intended audiences for the business 
case -the primary audiences are agency officials and their investment review boards. 
These managers must use the business cases to effectively manage their own IT 
portfolios and submit to OMB only those investment requests meeting criteria specified 
in OMB policies and supporting the priorities of the Administration. 

Having described a business case as a planning document and the management 
watch list as one tool used by OMB to monitor agency planning, let me now describe 
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how other tools are used to monitor actual project execution and performance. In doing 
so, one will see as OMB does, over emphasis on the management watch list is 
unproductive. 

OMB Oversight of Project Performance and the President’s Management Agenda 

Although business cases include information designed to identify whether the 
agency appropriately considered project performance as part of the project planning, they 
are but a snapshot in time and are not designed to be nor are they used for measuring 
project performance (i.e., whether the project is within cost, schedule and performance 
goals). Managing and measuring project performance is of course first and foremost an 
agency responsibility. OMB then oversees the agencies’ activities under the President’s 
Management Agenda (PMA) and its associated quarterly reporting process. 

I have described the PMA to the Committee in the past and we use it to drive 
agency results while monitoring progress in a number of areas. The PMA was launched 
in August 2001 as a strategy for improving the management and performance of the 
Federal Government. It focuses on the areas where deficiencies were most apparent and 
where the Government could begin to deliver concrete, measurable results. 

Since its creation, the PMA has expanded to include additional initiatives beyond 
the original five. The PMA continues to be a valuable help for departments and agencies 
to adopt new disciplines and promote an effective and enduring focus on results. The 
initial five key Government-wide areas are: 

• Strategic Management of Human Capital - having processes in place to ensure 
the right person is in the right job, at the right time, and is not only 
performing, but performing well; 

• Competitive Sourcing - regularly examining commercial activities performed 
by the government to determine whether it is more efficient to obtain such 
services from Federal employees or from the private sector; 

• Improved Financial Performance - accurately accounting for the taxpayers' 
money and giving managers timely and accurate program cost information to 
inform management decisions and control costs; 

• Expanded Electronic Government - ensuring the Federal Government's $65 
billion annual investment in IT significantly improves the government’s ability 
to serve citizens, and the IT systems are secure, and delivered on time and on 
budget; and 

• Budget and Performance Integration - ensuring performance is routinely 
considered in funding and management decisions, and programs achieve 
expected results and work toward continual improvement. 

For each initiative, the PMA established clear, government-wide goals or 
“Standards for Success.” Agencies then developed and implemented detailed, aggressive 
action plans to achieve those goals. Most importantly, agencies are held publicly 
accountable for meeting their goals. A simple red, yellow, and green grading system was 
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developed and each quarter, 0MB rates agencies on their status in achieving the overall 
goals of each initiative and on their progress in implementing their action plans. 

Specifically, the Expanding Electronic Government Scorecard includes the 
standards for success below. To get to green, agencies must: 

• Have an effective Enterprise Architecture; 

• Be able to demonstrate they are managing their major IT projects using an 
Earned Value Management System so they deliver results as expected, on- 
time and within budget, i.e., achieving, on average, 90% of cost, schedule 
and performance goals; 

• Secure at least 90% of operational systems and sustaining progress 
correcting security weaknesses through a Department-wide remediation 
process verified by the agency Inspector General; 

• Avoid redundant or agency-unique IT projects by participating in 
government-wide E-Gov initiatives and Lines of Business; and 

• Successfully jusdfy major IT investments with complete business cases 
adequately addressing: security, measures of success linked to the 
Enterprise Architecture, program management, risk management, and 
cost, schedule, and performance goals. 

Each quarter agencies receive a scorecard about their progress and status in 
achieving the Government-wide goals for these government-wide initiatives. The goal of 
the E-Govemment initiative is to use our nearly $65 billion expenditure in information 
technology to its fullest to provide services and information centered around citizen 
groups. 


We deliberately included a criterion for “acceptable business cases” for major 
systems in the PMA Scorecard, to underscore while investing in information technology 
has a technical component, it is at its core an essential management issue and have 
greatly increased executive-level attention and accountability with respect to IT spending. 

But again, the acceptability of businesses cases is just one of a number of critical 
components agencies must satisfy to get to green (or yellow) for the E-Govemment 
scorecard. If the business case criteria are not successfully met, agencies cannot move 
forward, regardless of their performance against other E-Govemment criteria. Agency 
scores are posted quarterly at http://results.gov/agenda/scorecard.html . 

Follow-up is dependent on the particular issues identified and tends to focus on 
strategic issues or problems existing at a government- wide or agency-wide programmatic 
level, not tactical ones residing with individual investments. For example, from 
reviewing agency investment requests and through our oversight over the course of the 
year, we identified widespread weaknesses in agencies meeting cost, schedule and 
performance goals. Therefore, we specifically emphasized earned value management as 
a key feature in the quarterly PMA scorecard reviews. 
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Conclusion 

Thank you for this opportunity to discuss the Administration’s strategy and 
progress to date in planning, managing, and measuring the results of the government’s IT 
investments. Through our existing processes, Congressional hearings, agency 10 reports, 
and GAO findings challenges regarding effective IT planning and management are 
routinely raised. As we continue to work with agencies to improve the planning, 
execution, and management of IT projects, we will also continue to look for new 
opportunities to refine our oversight. The management watch list represents just one 
example of such an opportunity and helped to call attention to concerns with the planning 
for major IT projects. 

We appreciate your interest in OMB’s management and oversight activities and 
will continue our efforts to drive improved performance and results throughout the 
Executive branch agencies, including OMB. 

Thank you. I will be happy to answer any questions at this time. 
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Chairman Davis. Thank you very much. 
Mr. Powner. 


STATEMENT OF DAVID A. POWNER 

Mr. Powner. Chairman Davis, Ranking Member Waxman, and 
members of the committee, we appreciate the opportunity to testify 
on our report, completed at your request, Mr. Chairman, on OMB’s 
management watch list. This morning I will summarize three key 
points in this report. 

First, 0MB annually identifies hundreds of IT projects represent- 
ing tens of billions of dollars that are at risk; meaning, there are 
significant questions about how these projects are planned and 
managed. In doing so, it identifies tremendous opportunities to 
strengthen investments. 

Second, 0MB does not have a list. It does not aggregate a single 
list that identifies each project and its weaknesses, and therefore 
is missing an opportunity to analyze IT investments on a govern- 
ment-wide basis. 

Third, 0MB does not consistently monitor the followup per- 
formed, and therefore was unable to tell us progress in addressing 
government-wide as well as project-specific weaknesses. Again, it is 
missing an opportunity to ensure that agencies address project 
weaknesses and that the Government’s investment in IT is not 
wasted. 

Expanding on each of these, first, 0MB should be commended for 
its analysis of agencies’ IT project business cases which now collec- 
tively total over $60 billion annually. In the 2005 budget, 0MB 
highlighted that of approximately 1,200 IT projects, about half, 620 
projects, valued at $22 billion, were on its management watch list. 
In the 2006 budget, 0MB again stated that of approximately 1,100 
IT projects, about a third, 342, valued at $15 billion, were on its 
list. 

0MB uses a comprehensive scoring process to evaluate each 
business case which consists of evaluating 10 categories associated 
with project planning and management. These categories include 
the project’s acquisition strategy, security plans and processes, and 
cost and schedule performance. Projects were placed on the man- 
agement watch list if they scored poorly overall or in specific cat- 
egories that 0MB emphasizes. Either way, being placed on the 
management watch list means that these projects clearly have 
weaknesses in project planning and management. Thus, 0MB iden- 
tifies tremendous opportunities to strengthen investments totaling 
billions of dollars. 

However, a single, aggregate list identifying the projects and 
their weaknesses does not exist. To derive the total number of 
management watch list projects reported in the President’s budget, 
0MB poled its individual analysts who have specific agency respon- 
sibilities and compiled the numbers and their combined value. By 
not aggregating the projects and weaknesses, 0MB is missing an 
opportunity for analyzing IT investments on a government-wide 
basis. 

In addition, 0MB does not consistently monitor the followup per- 
formed, and therefore was unable to tell us progress in addressing 
government-wide and project-specific weaknesses. Some projects 
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were followed up during budget preparation. In addition, 0MB offi- 
cials told us that followup of some management watch list projects 
was done through the quarterly e-gov scorecards associated with 
the President’s management agenda. 

However, 0MB could not tell us which of the 621 watch list 
projects for 2005 were followed up on. Nor could they describe the 
relationship between its followup activities and changes in the 
number of projects on the watch list between 2005 and 2006. 

In our opinion, the current followup that does occur may leave 
unattended weak projects consuming significant budget dollars. In 
addition, Mr. Chairman, OMB’s ability to report to the Congress on 
progress in addressing critical areas needing attention is limited by 
not having an aggregate list and coordinated followup. 

To take full advantage of the management watch list, we make 
several recommendations, including: developing a central list, using 
the list to guide prioritized followup, and reporting to the Congress 
on progress in addressing risks in areas needing additional atten- 
tion. 

In summary, the management watch list creates an ideal oppor- 
tunity to improve the Federal Government’s IT investments and 
ensure that taxpayers’ dollars are wisely invested. However, this 
opportunity is not being fully exploited because the list is not ag- 
gregated nor are there assurances that followup is adequate. 

This concludes my statement. I would be pleased to respond to 
any questions that you or members of the committee have at this 
time. 

[Note. — The GAO report entitled, “Information Technology, 
0MB Can Make More Effective Use of Its Investment Reviews,” 
may be found in committee files.] 

[The prepared statement of Mr. Powner follows:] 
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justifications for funding that federal agencies submit for major projects. 
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agencies, were then re^ionsible for maintmning information on these 
projects. To derive the total number of projects on the list for fiscal year 
2005, the office polled its individual analysts and compiled the result. 
However, 0MB officials told GAO that b^ause they did not see such an 
activity as necessary, they did not compile a single list Accordingly, 0MB 
has not fully exploited the opportunity to use its watch list as a tool for 
analyzing IT investments on a govemmentwide basis. 

0MB asked agencies to take corrective actions to address weaknesses 
associated with projects on the Management Watch list, but it did not 
develop a structured, consistent process for deciding how to monitor agency 
corrective actions. According to 0MB officials, decisions on monitoring of 
progress were typically made by the staff with responsibility for reviewing 
individual agency budget submissions, depending on the staffs insights into 
agency operations and objectives. Because it did not consistently reepLre or 
monitor agency follow-up activities, 0MB did not know whether the project 
risks that it identified throu^ its Management Watch List were being 
managed effectively, potentially leaving resources at risk of being committed 
to poorly planned and managed projects. In addition, because it did not 
consistently monitor the foUow-up performed on prefects on the 
Management W^h List, 0MB could not readily tell GAO which of the 621 
projects received foUow-iq> attention. 

To help enable 0MB to take advantage of the potential benefits of usii^ the 
Management Watch List as a tool for analyzing and following up on 
investments, GAO’s report included recommend^ons that 0MB develop a 
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for prioritizing and monitoring the projects on the list. GAO also 
recommended that the office use the prioritized list for reporting to the 
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a draft of this report, 0MB did not agree that the aggregated 
governmentvride list recommended by GAO is necessary for mlequate 
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Mr. Chairman and Members of the Committee: 

Thank you for the opportunity to participate in the Committee’s 
hearing on processes that the Office of Management and Budget 
(0MB) has developed as part of its efforts to identify and follow up 
on information technology (IT) projects that need management 
improvements. 

As you know, the President’s Budget for Fiscal Year 2005 requested 
over $60 billion to fund IT, and that figure is expected to rise 
throughout the rest of the decade. 0MB stated that of the nearly 
1,200 m^or IT projects in the fiscal year 2005 budget, it had placed 
about half — 621 projects, representing about $22 billion — on its 
Management Watch List, For fiscal year 2006, 342 of 1,087 IT 
projects (representing about $15 billion) were placed on the watch 
list. 

At your request, we performed a review of OMB’s processes for 
(1) placing projects on its Management Watch List and (2) following 
up on corrective actions established for projects on the list. Today I 
am summarizing the findings and recommendations of that report, 
which is being released today.' 


Results in Brief 

For the fiscal year 2005 budget, 0MB developed processes and 
criteria for including IT projects (investments) on its Management 
Watch List. In doing so, it identified opportunities to strengthen 
investments and promote improvements in IT management. 
However, 0MB did not develop a single, aggregate list identifying 
the projects and their weaknesses. Instead, according to 0MB 
officials, individual 0MB analysts assigned scores to the 
Justifications for funding (known as exhibit 300s) that are submitted 
by federal agencies. (These scores were based on criteria 


' GAO, Information Technology: OMB Can Make More Effective Use of Its In vestment 
Reviews, GAa05-276 (Washington. D.C.: Apr. 15. 2005). 
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established in the office’s Circular A-ll.) OMB delegated individual 
analysts on its staff, each of whom is typically assigned 
responsibility for several federal agencies, with maintaining, for 
their respective agencies, information for the IT projects included 
on the list To derive the total number of projects on the list that 
OMB reported (621 for fiscal year 2005), OMB polled its individual 
analysts and compiled the numbers. According to OMB officials, 
they did not construct a single list of projects meeting their watch 
list criteria because they did not see such an activity as necessaiy 
for performing OMB’s predominant mission: to assist in overseeing 
the preparation of the federal budget and to supervise agency 
budget administration. Thus, OMB did not exploit the opportunity to 
use the list as a tool for analyzing IT investments on a 
govemmentwide basis, limiting its ability to identify and report on 
the full set of IT investments requiring corrective actions. 

OMB asked agencies to take corrective actions to address 
weaknesses associated with projects on the Management Watch 
List, but it did not develop a structured, consistent process for 
deciding how to follow up on these actions. According to OMB 
officials, decisions on follow-up and monitoring of specific projects 
were typically made by the OMB staff with responsibility for 
reviewing individual agency budget submissions, depending on the 
staffs insights into agency operations and objectives. Because it did 
not consistently monitor the follow-up performed, OMB could not 
tell us which of the 621 projects identified on the fiscal year 2005 list 
received follow-up attention, and it did not know whether the 
specific project risks that it identified through its Management 
Watch List were being managed effectively. This approach could 
leave resources at risk of being committed to poorly planned and 
managed projects. Thus, OMB was not using its Management Watch 
List as a tool for improving IT investments on a govemmentwide 
basis and focusing attention where it was most needed. 

To enable OMB to take advantage of the potential benefits of using 
the Management Watch List as a tool for analyzing and following up 
on IT investments, we recommended in our report that OMB 
develop a single, aggregate Management Watch List, and that it 
develop and use criteria for prioritizing and monitoring the projects 
on the list. We also recommended that the office use the prioritized 
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list for reporting to tlie Congress as part of its statutory reporting 
responsibilities. In commenting on a draft of this report, 0MB did 
not agree that the aggregated govemmentwide list recommended by 
GAO is necessary for adequate oversight and management. 
However, GAO continues to believe that an aggregated Management 
Watch List would contribute to OMB’s ability to analyze IT 
investments govemmentwide and track progress in addre^ing 
deficiencies. 


Background 

The President’s Budget for Fiscal Year 2005 identified 
approximately $60 billion for IT projects. In that budget, 0MB stated 
that, of approximately 1,200 major IT projects, about half — 621 
projects, representing about $22 billion — were on a Management 
Watch List. In testimony in March 2004,^ 0MB officials explained 
that the fiscal year 2005 budget process required agencies to 
successfully correct project weaknesses and business case 
deficiencies of projects on the Management Watch List; otherwise, 
0MB would limit agencies’ spending on new starts and other 
developmental activities. 

In the most recent budget, that for fiscal year 2006, 0MB continued 
its use of a Management Watch List. This budget includes 1,087 IT 
projects, totaling about $65 billion. Of this total, 342 projects, 
representing about $15 billion, are on the Management Watch List. 
The budget also stated that projects on the Management Watch List 
had to address performance, security, or other related issues before 
funding would be obligated in fiscal year 2006. 


®On March 3, 2004, OMB's Deputy Director for Management and its Administrator for 
Electronic Government and Information Technology testified at a hearing conducted by the 
Subcommittee on Technology, Inforro^ion Policy, Intergovernmental Relations and the 
Census, Committee on Government Reform, House of Representatives. The hearing topic 
was “Federal Information Technology Investment Mans^ement, Strategic Planning, and 
Performance Measurement; $60 Billion Reasons Why." 
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According to OMB officials, the office identifies projects for the 
Management Watch List through their evaluation of Justifications for 
funding that agencies submit for m^or IT projects as part of the 
budget development process. This evaluation is carried out as part 
of OMB’s predominant mission: to assist the President in ovenseeing 
the preparation of the federal budget and to supervise budget 
administration in executive branch agencies, OMB is also 
respoi^ible for evaluating the effectiveness of agency programs, 
policies, and procedures; assessing competing funding demands 
among agencies; and setting funding priorities. Finally, OMB is 
responsible for oveiseeing and coordinating the administration’s 
policies regarding procurement, financial management, information, 
and regulations. In each of these three areas of responsibility, 

OMB’s role is to help improve administrative management, to 
develop better performance measures and coordinating 
mechanisms, and to reduce unnecessary burden on the public. 

To drive improvement in the implementation and management of IT 
projects, the Congress enacted the Clinger-Cohen Act in 1996, which 
expanded the responsibilities of the agencies and OMB under the 
Paperwork Reduction Act.’ Under the act, agencies are required to 
engage in capital planning and performance- and results-based 
management. OMB is required to establish processes to analyze, 
track, and evaluate the risks and results of m^or capital 
investments in information systems made by executive agencies. 
OMB is also required to report to the Congress on the net program 
performance benefits achieved as a result of m^jor capital 
investments in information systems that are made by executive 
agencies.* 

In response to the Clinger-Cohen Act and other statutes, OMB 
developed section 300 of Circular A-1 1. This section provides policy 
for planning, budgeting, acquisition, and management of federal 
capital assets and instructs agencies on budget justification and 


’44 U.S.C. § 3504(aXlXBXvi) (OMB); 44 U.S.C, § 3506(h)(5) (agencies). 

*These requirements are specifically described in the Clinger-Cohen Act, 40 U.S.C. § 
11302(e). 
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reporting requirements for m^or IT investments.^ Section 300 
defines the budget exhibit 300 as a document that agencies submit 
to 0MB to justify resource requests for m^or IT investments. This 
reporting mechanism (part of the budget formulation and review' 
process) is intended to enable an agency to demonstrate to its own 
management, as well as to 0MB, that it has employed the disciplines 
of good project management; developed a strong business case for 
the investment; and met other Administration priorities in defining 
the cost, schedule, and performance goals proposed for the 
investment. The exhibit 300 includes information that is intended, 
among other things, to help 0MB and the agencies identify and 
correct poorly planned or performing investments (i.e., investments 
that are behind schedule, over budget, or not delivering expected 
results) and real or potential systemic weaknesses in federal 
information resource management (e.g., project manager 
qualifications). 

According to OMB’s description of its processes, agencies’ exhibit 
300 business cases are reviewed by OMB analysts from its four 
statutory offices — ^the Offices of E-Govemment and Information 
Technology (e-Gov), Information and Regulatory Affairs (OIRA), 
Federal Financial Management, and Federal Procurement Policy — 
and its Resource Management Offices (RMO). Within OIRA, each of 
about 12 analysts is responsible for overseeing IT projects for a 
specific agency or (more commonly) several agencies. According to 
OMB officials, the OIRA and e-Gov analysts, along with RMO 
program examiners, evaluate and score agency exhibit 300 business 
cases as part of the development of the President’s Budget. The 
results of this review are provided to agencies through what is 
called the "passback” process. That is, OMB passes the requests 
back to agencies with its evaluation, which identifies any areas 
requiring remediation. 


'^OMB Circular A-11 defines a m^or IT investment as an investment that requires special 
management attention because of its importance to an agency’s mission or because it is an 
integral part of the agency’s enterprise architechire, has significant program or policy 
implications, has high executive viability, or is defined as mtgor by the agency’s capital 
planning and investment control process. 
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The integrity of this review process presupposes that the exhibit 
300s are accurate. In response to a request from this committee, we 
are currently reviewing the quality of the information that underlies 
exhibit 300s at several agencies. We will be reporting on this work in 
the fall of this year. 


OMB Established Processes and Criteria for Identifying Weak 
Projects, but It Did Not Use an Aggregate List to Perform Its 
Analysis or Oversight 

According to OMB officials, including the Deputy Administrator of 
OIRA and the Chief of the Information Technology and Policy 
Branch, OMB staff identified projects for the Management Watch 
List through their evaluation of the exhibit 300s that agencies submit 
for m^or IT projects as part of the budget development process. 

The OMB officials added that the scoring of agency exhibit 300s is 
based on guidance in OMB Circular A- 11® that is intended to ensure 
that agency planning and management of capital assets are 
consistent with OMB policy and guidance. 

As described in Circular A-11, the scoring of a business case 
consists of individual scoring for 10 categories, as well as a total 
composite score of all the categories. (Examples of these 10 
categories are performance goals, security and privacy, 
performance-based management system— including the earned 
value management system^ — and support of the President's 
Management Agenda.) According to Circular A-1 1, scores range 
from 1 to 5, with 5 indicating investments whose business cases 
provided the best justification and 1 the least 


®These scoring criteria are presented in Office of Management and Budget Circular A-11, 
Part 7, Planning, Budgeting, Acqtiisidon, and Management ofCapital Assets (July 2004). 

^Earned value management is a project management tool that integrates the investment 
scope of work with schedule and cost elements for investment planning and control. This 
method compares the value of work accomplished during a given period with that of the 
work expected in the period. Differences in expectations are measured in both cost and 
schedule variances. 
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0MB officials s^d that, for fiscal year 2005, an IT project was placed 
on the Management Watch List if its exhibit 300 business case 
received a total composite score of 3 or less, or if it received a score 
of 3 or less in the areas of performance goals, performance-based 
management systems, or security and privacy, even if its over^l 
score was a 4 or 5. 0MB reported that agencies with weaknesses in 
these three areas were to submit remediation plans addressing the 
weaknesses. 

According to 0MB management, individual analysts were 
responsible for evaluating projects and determining which projects 
met the criteria to be on the Management Watch List for their 
assigned agencies. To derive the total number of projects on the list 
that were reported for fiscal year 2005, 0MB polled the individual 
analysts and compiled the numbers. 

0MB officials said that they did not aggregate these projects into a 
single list describing projects and their weaknesses, because they 
did not see such an activity as necessary in performing OMB’s 
predominant mission. Further, 0MB officials stated that the limited 
number of analysts involved enabled them to explore 
govemmentwide issues using ad hoc queries and to develop 
approaches to address systemic problems without the use of an 
aggregate list. They pointed at successes in improving IT 
management, such as better compliance with security requirements, 
as examples of the effectiveness of their current approach. 

Nevertheless, OMB has not fully exploited the opportunity to use its 
Management Watch List as a tool for analyzing IT investments on a 
govemmentwide basis. According to the Clinger-Cohen Act, OMB is 
required to establish processes to analyze, track, and evaluate the 
risks and results of mjyor IT capital investments made by executive 
agencies, which aggregation of the Management Watch List would 
facilitate. Without aggregation, OMB’s ability to conduct 
govemmentwide analysis is limited, since no govemmentwide 
dataset exists — only a set of subordinate datasets in the hands of 
individual analysts. In addition, each time an up-to-date report is 
required, OMB must query all its analysts to assemble an aggregate 
response; thus, the office cannot efficiently identify, analyze, and 
report on the full set of IT investments requiring corrective actions. 
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OMB’s Monitoring of Projects Was Inconsistent, and Agency Follow- 
up Activities Were Not Tracked Centrally 

0MB asked agencies to take corrective actions to address 
weaknesses associated with projects on the Management Watch 
List, but it did not develop a structured, consistent process or 
criteria for deciding how to follow up on these actions. Instead, 

0MB officials, including the Deputy Administrator of OIRA and the 
Chief of the Information Technology and Policy Branch, said that 
the decision on whether and how to follow up on a specific project 
was typically made Jointly between the OIRA analyst and the RMO 
program examiner who had responsibility for the individual agency, 
and that follow-up on specific projects was driven by a number of 
factors, only one of which was inclusion on the Management Watch 
List. According to these officials, those Management Watch List 
projects that did receive specific follow-up attention received 
feedback through the passback process, through targeted evaluation 
of remediation plans designed to address weaknesses, and through 
the apportioning of funds so that the use of budgeted dollars was 
conditional on appropriate remediation plans being in place.* 

These officials also said that follow-up of some Management Watch 
List projects was done through quarterly e-Gov Scorecards; these 
are reports that use a red/yellow/green scoring system to illustrate 
the results of OMB’s evaluation of the agencies’ implementation of 
e-govemment criteria in the President’s Management Agenda 0MB 
determines the scores in quarterly reviews, in which it evaluates 
agency progress toward agreed-upon goals along several 
dimensions. The e-gov scores are part of the input to the quarterly 
reporting on the President’s Management Agenda. 

0MB officials also stated that those Management Watch List 
projects that did receive follow-up attention were not tracked 
centrally, but only by the individual OMB analysts. Accordingly, 
0MB could not readily tell us which of the 621 watch list projects 


®The authority for j^portioning funds is specifically described in the CUnger-Cohen Act, 40 

U.S.C. § 11303(b)(5XBXH)- 
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for fiscal year 2005 were followed up on, nor could it use the list to 
describe the relationship between its follow-up activities and the 
changes in the numbers of projects on the watch list between fiscal 
year 2005 (621 projects) and fiscal year 2006 (342 projects). 

0MB does not have specific criteria for prioritizing follow-up on 
Management Watch Ust projects. Without specific criteria, 0MB 
staff may be agreeing to commit resources to follow up on projects 
that did not represent OMB’s top priorities from a govemmentwide 
perspective. For example, inconsistent attention to OMB priorities, 
such as earned value management, could undermine the objectives 
that OMB set in these areas. In addition, m^or projecte with 
significant management deficiencies may have continued to absorb 
critical agency resources. 

In order for OMB management to have assurance that IT program 
deficiencies are addressed, it is critical that corrective actions 
associated with Management Watch List projects be monitored. 
Such monitoring is instrumental in ensuring that agencies address 
and resolve weaknesses found in exhibit 300s, which may indicate 
underlying weaknesses in project planning or management. 
Tracking agency follow-up activities is essential to enabling OMB to 
determine progress on both specific projects and govemmentwide 
trends. Without tracking specific follow-up activities, OMB could 
not readily ascertain whether the risks that it identified through its 
Management Watch List were being managed effectively; if they 
were not, funds were potentially being spent on poorly planned and 
managed projects. 


In summary, OMB’s scoring of agency IT budget submissions and 
identification of weaknesses has resulted in opportunities to 
strengthen investments. However, the office has not taken the next 
step — to develop a single, aggregate list identifying the projects and 
their weaknesses — and it has not developed a structured, consistent 
process for deciding how to follow up on corrective actions. OMB’s 
approach does not fully exploit the insights developed through the 
scoring process, and it may leave unattended weak projects 
consuming significant budget dollars. Developing an aggregated list 
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would help 0MB to realize more fully the potential benefits of using 
the Management Watch List as a tool for monitoring and an^yzing 
IT investments govemmentwide. Accordingly, in our report we 
recommended that the Director of 0MB take the following four 
actions: 

• Develop a central list of projects and their deficiencies. 

• Use the as the basis for selecting projects for follow-up and for 

tracking follow-up activities; 

• to guide follow-up, develop specific criteria for prioritizing the IT 
projects included on the list, taking into consideration such 
factors as the revive potential fin^cial and program benefits of 
these IT projects, as well as potential risks. 

• Analyze the prioritized list to develop governmentwide and agency 
assessments of the progress and risks of IT investments, identifying 
opportunities for continued improvement. 

• Report to the Congress on progress made in addressing risks of 
major IT investments and management areas needing attention. 

In commenting on a draft of this report, OMB’s Administrator of the 
Office of E-Govemment and Information Technology expressed 
appreciation for our review of OMB’s use of its Management Watch 
List. However, the Administrator disagreed with our assessment that 
an aggregated governmentwide list is necessary to perform adequate 
oversight and management, and that 0MB does not know whether 
risks are being addressed. Nonetheless, based on OMB’s inability to 
easily report which of the 621 investments on the Management 
Watch List remained deficient or how much of the $22 billion cited 
in the President's Budget remained at risk, we continue to believe 
that an aggregate list would facilitate OMB’s ability to track 
progress. 

Mr. Chairman, that concludes my testimony. I would be pleased to 
answer any questions that you and the other Members of the 
Committee may have. 
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Contact and Acknowledgements 

For further mformation, please contact Da\i(i A. Powner at (202) 
512>9286 or Lester Diamond at (202) 512-7957. We can also be 
reached by e-ni^ at pownerd@gao.gov or diamondl@gao.gov. Key 
contributors to this testimony were William G. Barrick, Barbara 
Collier, Lester Diamond, and Sandra Kerr. 


(3IM87) 


Page 11 


GAO-05-671T 



33 


Chairman Davis. Thank you hoth. 

Ms. Evans, given the effort you have put into creating and using 
the watch list, it seems that the small additional investment of cre- 
ating an aggregate list of projects and weaknesses could yield sig- 
nificant opportunities and a means to track progress on agency cor- 
rective actions. What is it about an aggregate management watch 
list that you either object to or have not seen reason to move ahead 
on? Am I missing something? 

Ms. Evans. We have had a lot of discussion 

Chairman Davis. I mean, a lot of the criticism in the paper and 
GAO’S 

Ms. Evans. There is a lot of criticism about 

Chairman Davis. I am just trying to understand your perspec- 
tive. 

Ms. Evans. Yes, sir. Really, what it comes down to is what would 
be the intended outcome of having the aggregate watch list. We 
have gone back and forth over what would be the result, what 
would change, and what would be the outcome, what do we really 
want to achieve. 

And when we look at this, is the outcome to have good business 
cases, is it to have a passing business case to ensure that every- 
thing that is written down on the business case meets our criteria? 
Or is the outcome to really achieve what is described in the busi- 
ness case; that is, what the dollars are intended to be invested in? 

That really is what we are focusing our efforts on, is does the 
agency have the right management practices in place to ensure 
what that investment is supposed to achieve. So we work on it by 
a portfolio basis. 

It is not that I am against having an aggregate list. What we are 
actually looking back and forth at, as you would any investment, 
is what are the pros and cons associated with that, and would we 
drive certain behaviors where people would just turn in “a good 
term paper,” but not really address what the problem is that is 
happening in that agency. 

Chairman Davis. Over the years, this is long before you got there 
and I got here, the Government had lost tens of billions of dollars 
in IT systems that have just not worked out and so on. It seems 
to me that just having a list up there tracking these areas, where 
you can go back, it not only gives it a level of transparency, but 
it would make it easier to manage. I do not hear you really object- 
ing. You are just saying that you think the way you are doing it 
handles it. 

Ms. Evans. Yes, sir. Because of the way that we are looking at 
it, what we do not want to drive is certain behavior where people 
are just checking off the boxes and not really addressing the prob- 
lem. And the problem is really what management practices do you 
need to have in place to ensure that the progress hits the mile- 
stones? 

Chairman Davis. Let me ask this question. 

Ms. Evans. Sure. 

Chairman Davis. You stated in previous testimony before the 
committee or subcommittee that agencies with projects on the list 
would be required to address these weaknesses or else face 0MB 
placing limits on their spending. Is that right? 
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Ms. Evans. Yes, sir. 

Chairman Davis. Can you tell us how many projects and what 
total dollar value has been held back as a result of agencies not ad- 
dressing projects? 

Ms. Evans. We did provide a chart last year based on the five 
agencies that we did hold back the money that we took the specific 
action on. We can provide that again to the committee this year. 
I can go back and do that. But I would like to stress, part of what 
we are trying to do here is that is the action that we take. There 
are actions that the agencies take themselves that we do not have 
to take. 

And so we would not be able to provide that information. That 
would have to come from an agency-by-agency basis. But there are 
specific actions that were taken by the agencies where they prohib- 
ited the spending of the project themselves without us having to in- 
tervene. 

Chairman Davis. Mr. Powner, what does 0MB lose by not devel- 
oping a single, aggregate management watch list? 

Mr. Powner. Several things, Mr. Chairman. Eirst of all, having 
an aggregate list allows you to analyze government-wide IT weak- 
nesses more effectively. The other thing that it provides an oppor- 
tunity for, that you pointed out, is that it then provides a mecha- 
nism to monitor and track those investments. 

One additional example, knowing the differences between the 
2005 and 2006 list would be very important. So having aggregate 
lists where we could compare those aggregate lists and look at 
projects that continue to be on that list from year to year would 
be very valuable from an oversight perspective. 

Chairman Davis. Now, are we talking about a sophisticated data 
base that would capture all investment information, or something 
less complex? 

Mr. Powner. Our recommendation was just to aggregate the list. 
This can probably be done with applications that currently reside 
on desktops today. So we are not talking about anything too sophis- 
ticated here. 

Chairman Davis. OK. In addition to your recommendations, do 
you have any suggestions for how we can all work together — I am 
talking about 0MB, I am talking about the agencies, and Con- 
gress — work together collectively to improve these critical IT in- 
vestments? 

Mr. Powner. Yes, I do. Eirst of all, I think 0MB should be com- 
mended for 12 analysts that identify all these weaknesses with all 
these projects. That is a heck of an effort up front. And to expect 
them to followup on 600 or 350 projects is asking a lot. A couple 
thoughts would be, to involve some of the accountability agencies, 
IGs could get involved in following up with some watch list 
projects, GAO would gladly look at the top 30, 40 projects, and in 
addition, hearings such as these, Mr. Chairman, where you call up 
to the table the top five or six agencies that either have the most 
projects on the list or the highest dollar value helps further the 
rigor associated with the management of these projects. 

Chairman Davis. OK. Thank you very much. 

Mr. Ruppersberger. 
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Mr. Ruppersberger. Thank you, Mr. Chairman. First, Ms. 
Evans. Last year, your office designated 621 Federal technology 
projects as management watch list projects. This year your office 
designated 342 on this watch list. Is that correct? 

Ms. Evans. Yes, sir. 

Mr. Ruppersberger. Now this is a considerable number of 
projects. And it appears from the GAO report that 0MB has just 
a dozen or so analysts overseeing these hundreds of troubled 
projects. First, does 0MB have a system for prioritizing these 
projects to ensure that attention is paid to mission-critical and 
other important systems? 

Ms. Evans. The short answer is, yes. And it is more 

Mr. Ruppersberger. The second question is, can you describe 
the system and why you think it works? 

Ms. Evans. Yes. I am getting ready to do that. But I would like 
to clarify one thing. The initial analysis on the business cases are 
done by the 12 analysts that Mr. Powner had mentioned. But the 
followup on these actions are a joint effort done by everyone within 
0MB. So there is a joint team that we do through the scorecard 
process with the budget examiners as well as the IT analysts. 

So there is a process, there is a consistent process. And because 
this question has arisen about what we should followup on and do 
we need to have better clarification, we are in the process of finaliz- 
ing our guidance out to the agencies of what we would then call 
the “high risk” projects that are included on the management 
watch list. And then those would be then singled out for us to fol- 
lowup on directly through the scorecard process and have more 
rigor in those. 

But we do followup on all of them, all the business cases through 
the scorecard process. And the agencies have to remediate the 
weaknesses and tell us what actions they are going to do. And this 
year, they have to have it done by June 30, so that there is enough 
time for us to analyze are those adequate before they start spend- 
ing money before the start of the next fiscal year. 

Mr. Ruppersberger. Getting back to my issue. It is about re- 
sources sometimes. You have a lot of projects that are out there 
and some have to be prioritized, as we should, but there are some 
that maybe need to be prioritized that are not. Do you feel that you 
have the tools and the resources to oversee these projects and do 
it in the right way? 

Ms. Evans. Yes, sir, I feel that we do. Because what we do is we 
analyze not the project itself, but all the projects that are in a port- 
folio to see if there is a pervasive or a systemic problem. It could 
be something as simple as there is not the right leadership at the 
top level to give the agency itself the resources that it needs to suc- 
ceed. 

Mr. Ruppersberger. Let me get into a specific project. 

Ms. Evans. Sure. 

Mr. Ruppersberger. We recently saw as part of the Trilogy 
project the IPI spent $170 million to develop a new case manage- 
ment system that they will never use. It certainly seems that at 
some point in a multiyear process of developing the system some- 
one should have noticed that this project was seriously off course. 
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Now, was the Trilogy project on the management watch list this 
year or last year, do you know, both? 

Ms. Evans. Yes. And because it is a high risk, high visibility 
project, internally within 0MB when that happens, especially on a 
project of that nature given the critical mission that it is support- 
ing, there are additional above and beyond activities that we do 
outside of the scorecard process. And in that particular case, we 
had monthly meetings and then went to bi-weekly meetings to talk 
and work with the team to understand what was going on and to 
give them the resources that they would need, as well as to under- 
stand what we needed to do to improve that so that project could 
go forward and be successful. 

Mr. Ruppersberger. Let me ask you this. Why do you think the 
Federal Government’s investment review process did not catch the 
problems with this project? Now I know there are a lot of other 
issues, you have the private contractor, you had a lot, but bottom 
line, I think we need to discuss, that is a perfect example, where 
did we go wrong, where did your process go wrong that we did not 
get involved earlier and try to bring it to the table. 

Ms. Evans. And I would like to address that. I believe that up 
until within these last 2 years, especially with our implementation 
of earned value management through the President’s management 
agenda on the scorecard, a lot of our activities are focused on plan- 
ning. And the failure of the Trilogy project was actually in the exe- 
cution — the problems with the contractor, project management, did 
they have the right focus, requirements creep, everything that you 
read in the press. 

Those are things that are tracked through the earned value man- 
agement activities. That earned value is the actual numbers, like 
you would then start seeing, if I said it was going to take 10 weeks 
to accomplish a certain deliverable and it takes 12 , that sets up a 
flag. We at 0MB were not collecting a lot of that data and working 
with the agencies directly in managing it at that level. 

Mr. Ruppersberger. What do you think 0MB could have done 
better in order to get more involved so that we could have ad- 
dressed this issue sooner? Looking at you and looking at your oper- 
ation, what do you think you could have done better just specifi- 
cally on the Trilogy project with the FBI? Or do you think you were 
perfect? 

Ms. Evans. No, I do not. And I think that hearings such as this 
gives us clearer guidance on what the expectations are from the 
Hill as well. But I believe that we have learned from that project, 
continuously learn from many of the IT projects. 

Right now, we are focused on implementing and giving clearer 
guidance to the agencies on earned valued which is focused on the 
execution, how the agencies are actually going about and achieving, 
executing out on the project plant to ensure that they have their 
project managers in place, that they have clearly defined the right 
deliverables, and is there spending. That is what we call 10 percent 
of cost, schedule, and performance. We are measuring those activi- 
ties now. We were not measuring those previously. So I do agree 
that there were things that we needed to do better in an oversight 
capacity. 

Mr. Ruppersberger. OK. Thank you. 
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Chairman Davis. Questions, Mr. Porter? No? Ms. Watson, any 
questions? 

Ms. Watson. Thank you, Mr. Chairman. I am not sure that I 
heard clearly or that I was able to decipher the response when 
asked what is needed to be able to do the management watch that 
is necessary. And I also want to know how long is the evaluation 
after you put a particular project on the watch list, how long do 
you followup? Is there a long-range follow through? I was trying to 
read through our information to see if it stated what that period 
of time would be, but maybe you can respond. And this question 
is to Ms. Evans. 

Ms. Evans. Sure. We would followup, depending on what the 
problem is that we would identify within an agency, through the 
life cycle. So if an investment is going to go 3 to 5 years, we con- 
tinuously work with the agency through that period. So it would 
depend on what you identify as the issue. 

Say, for example, if everything in the agency we failed a business 
case because they had bad cyber security, they just did not have 
a good cyber security plan, that is something that this committee 
measures as well, and say the agency had an F on the cyber secu- 
rity from your scorecard, we would continue to work on the issue 
of cyber security within that agency and then work with them then 
to see how and ensure that what they are putting in their program 
then cascades down through the management practices they have 
for projects. So if they say that they are doing something in the se- 
curity area, you followup to make sure that it is actually followed 
through in the actual projects as they execute out multiple projects 
within the agency. 

So it would depend on what the problem is. But we continuously 
followup. When we talk about the management watch list specifi- 
cally as we look at these numbers, 342, 621, we try to address what 
is the over-arching problem there — is it a leadership problem, is it 
a risk management problem, is it a cyber security problem — and 
then work at that high level and then work with the agency to 
have processes in place so that it will perpetuate throughout the 
organization so that they can move forward on that. 

I do not know if that is getting to all the issues, but it is always 
ongoing. We do not just say, OK, this one is good to go and then 
walk away from that. We continuously work with the agency on the 
problems that we would identify. 

Ms. Watson. Thank you. I heard you respond that you thought 
you had the resources to do this long-term. The way you explain 
it, it would take various units depending on where the problem 
really resides. Do you have the personnel, do you have the re- 
sources to do that kind of in-depth followup? 

Ms. Evans. And the short answer again is, yes. Because part of 
what we do is we work with the agency, we identify areas, we offer 
suggestions and recommendations, but the hard work of remediat- 
ing the problems and ensuring things are done at the agencies. The 
agencies are the ones who have to change their management prac- 
tices, the agencies are the ones who have to take the corrective ac- 
tion, and then we work with them. The hard work is actually fixing 
the problem and that is where the resources are needed, and that 
is with the agencies. 
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Ms. Watson. So many of these agencies seem to be short- 
changed in recent budgets. So that is where my interest is, do we 
have the resources? Thank you very much. I appreciate your re- 
sponse. 

Chairman Davis. Ms. Evans, let me just ask, what is the No. 1 
problem you see out there in the agencies with administering IT 
programs? Do we have enough competent procurement officers? Is 
it the coordination between the agency sometimes and the contract- 
ing officers? Are we not holding the contractors tight enough? Is 
there one theme, or is it just a number of themes that sometimes 
have these contracts go awry? 

Ms. Evans. This is going to seem like a very simple answer to 
a complex question. All those things that you have described are 
symptoms of the problem. It goes back to very basic project man- 
agement. Many times as a project starts there is not a clear vision 
of what the outcome of that project is supposed to achieve. So if we 
use the Trilogy project again, it started down the path and it had 
one outcome but it changed multiple times. 

So as that change occurs, that is where then the disconnect hap- 
pens like what you are talking about, where a procurement officer 
may not necessarily put the right contract vehicle in place because 
they think they are going down to achieve one outcome when they 
really needed to achieve another. So it is communications and hav- 
ing a clear vision of what that project is supposed to achieve. 

Chairman Davis. But what we ought to be doing is catching 
these early, right? 

Ms. Evans. Yes, sir. 

Chairman Davis. That is the goal. Obviously, in some of these 
complex procurements the needs are going to change as you get 
into it a little bit. The key is catching it early and not having it 
run a $30 million, $100 million bill before you get there. 

Ms. Evans. And the other part of that, and I would say is back 
to us at 0MB, is if you said that you were going down and the 
original vision is like a two-sentence vision, and this is what we 
ask now from agencies, to clearly articulate in two sentences, three 
sentences or less what you are going to get out of this project. If 
they cannot do that, there is a problem. 

And then as a follow-on activity, we need to continuously follow- 
up to ensure that they have not lost sight of that original goal. If 
they do, and that is what we need to do from an oversight capacity, 
if they need to change it, then they have to be able to justify the 
changes. 

And so we have other indicators that we are putting in place to 
try to catch it sooner before there is so much invested in it. And 
those are the other tools that we have been implementing to try 
to monitor that and catch it. 

Chairman Davis. We will fight on the House floor, sometimes 
spend hours fighting over a $30, $40, $50 million program. But an 
IT project goes awry, it could be a lot more than that. So, really, 
when you talk about savings in government and efficiency in gov- 
ernment, it is overseeing some of these areas. And we can blame 
the agencies, but at the end of the day it starts and stops with 
0MB. That is why the watch list is so important. I just wonder 
what other tools that we may need in a government-wide perspec- 
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tive in terms of being able to get good program managers in, and 
pay them accordingly. Do you see any specific concerns with that? 

Ms. Evans. Well, as we have outlined before, project manage- 
ment, again, is the key to success because that project manager is 
the front line defense. The Federal CIO Council took that issue on 
last year as a result of this analysis and made recommendations 
to us, we finalized the guidance back out to the agencies. And what 
it did was help the agencies identify what type of project manager, 
the level of complexity of the project. We continue to develop these 
tools. We just issued recent guidance jointly with 0PM to look at 
the work force so that you have the right resources and the right 
people in place. 

Chairman Davis. And the right training? 

Ms. Evans. And the right training. And what are the gaps, what 
do you currently have, what do you need, and are you adequately 
funded for that. Because the problem is just within one agency and 
it is two to three staff people that you need, that is a different solu- 
tion than if we see, gosh, we need 1,000 project managers at a cer- 
tain proficiency level across the entire government. We need to 
have that information ahead of time. And you are right, that is an 
0MB responsibility to ensure that the agencies have adequate re- 
sources to accomplish that. 

Chairman Davis. At DOD there have been cuts in procurement 
officials. That is one of the ways they try to save money. And some- 
times it looks on the line like you are cutting dollars, but if a pro- 
curement goes awry, it ends up costing you 10 times, that could be 
an outcome of that. That is what we need to be careful about. 

Mr. Powner, do you have any comments on that? 

Mr. Powner. Just piggybacking off of your comment on catching 
some of the risk areas early. I do not want to downplay the impor- 
tance of the watch list in the categories that we look at. Many 
things that we discuss associated with Trilogy, I know we do work 
for you on secure flight at TSA, a couple of the categories that are 
highlighted in the analysis for the watch list are program manage- 
ment, project management, and risk management. Clearly, if you 
have rigorous processes in place associated with project manage- 
ment and risk management, it would help to catch some of these 
issues that ultimately result in some of these projects failing. 

Chairman Davis. Thank you very much. Any other questions 
from Members? 

Thank you very much. We appreciate your being here. 

We will now move to our next panel. We have here Mr. Dan Mat- 
thews, the Chief Information Officer of the U.S. Department of 
Transportation; Mr. Robert McFarland, Assistant Secretary for In- 
formation Technology at the U.S. Department of Veterans Affairs; 
Ms. Rosita Parkes, the Chief Information Officer at the U.S. De- 
partment of Energy; and Lisa Schlosser, CIO at the Department of 
Housing and Urban Development. 

Thank you very much for being with us this morning. If you 
would stand with me and raise your right hands, I will swear you 
in. 

[Witnesses sworn.] 

Chairman Davis. Let the record reflect that all witnesses have 
responded in the affirmative. 
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Thank you. We have a gentleman back here. 

Mr. Ash. Darren Ash, with the Department of Transportation. 

Chairman Davis. Thank you very much for being with us. Let 
the record show that you were also sworn should we have to call 
on you for any questions. 

Mr. Matthews, we will start with you, and then we will work on 
down. Your entire statement is in the record. Thank you. 

STATEMENTS OF DAN MATTHEWS, CHIEF INFORMATION OFFI- 
CER, U.S. DEPARTMENT OF TRANSPORTATION, ACCOM- 
PANIED BY DARREN B. ASH; ROBERT MCFARLAND, ASSIST- 
ANT SECRETARY FOR INFORMATION TECHNOLOGY, U.S. DE- 
PARTMENT OF VETERANS AFFAIRS; ROSITA PARKES, CHIEF 

INFORMATION OFFICER, U.S. DEPARTMENT OF ENERGY; 

AND LISA SCHLOSSER, CHIEF INFORMATION OFFICER, U.S. 

DEPARTMENT OF HOUSING AND URBAN DEVELOPMENT 

STATEMENT OF DAN MATTHEWS 

Mr. Matthews. Thank you, Mr. Chairman. Mr. Chairman and 
members of the committee, thank you for the opportunity to appear 
today to discuss the Office of Management and Budget’s watch list. 

As the Department’s Chief Information Officer, I oversee the U.S. 
Department of Transportation’s information technology investment 
guidance, cyber security, and operational responsibility for the de- 
partmental network and communications infrastructure. I also 
serve as the vice chair of the Federal CIO Council. 

As I begin my remarks, let me stipulate that the 0MB watch list 
is a management tool that DOT uses to gauge the effectiveness of 
our IT investment program. DOT recognizes that to comply with 
the Clinger-Cohen Act and other statutory requirements, external 
and internal oversight efforts necessitate creating watch lists for IT 
investments. 

OMB’s watch list happens to be a well-known tool throughout the 
Government, as it uses defined requirements and multiple cat- 
egories to identify troubled programs and agency-wide challenges. 
OMB’s use of a published scoring approach creates a level playing 
field for Federal agency initiatives. Any individual program in any 
departmental agency may have deficiencies in any one or more 
measurement categories. Over the last several years, DOT has sig- 
nificantly reduced the number of our programs on OMB’s watch 
list. 

To address how OMB’s watch list has affected DOT’s operations, 
I noted that we use it as one of several critical management and 
oversight tools. DOT also uses the FISMA metrics, IG and GAO 
audit reports, and quarterly earned value management data re- 
ports to identify at-risk programs. 

What differentiates the 0MB watch and these other tools is that 
while unique concerns about an individual program may be raised 
in an audit report, the watch list, through its use of defined re- 
quirements in specific categories, provides a same measure view 
from program to program. In short, this same measure view allows 
us to see where we perform well and where we need to concentrate 
our efforts in order to strengthen our stewardship of the IT invest- 
ments made at DOT. 
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dot’s internal IT management and oversight controls, including 
the 0MB watch list, are used to designate under-performing invest- 
ments as at-risk. Either the Departmental Investment Review 
Board or the operating administration review board must review 
any at-risk program. The reviewing board can direct corrective ac- 
tions within a required timeframe, and can make a decision to 
modify, rebaseline, or possibly cancel the program. 

Because the criteria for OMB’s watch list are applied across the 
department’s investments, they help DOT focus on those critical 
program management issues that warrant agency-wide attention. 
For example, 2 years ago a significant number of DOT’s business 
cases found their way onto the watch list due to security weak- 
nesses. DOT could have relied exclusively on FISMA-related 
metrics to increase management attention on our IT investments. 
Instead, we used an accumulated effect approach, letting the busi- 
ness case cores, FISMA measures, and the weight of the Presi- 
dent’s management agenda scorecard focus our attention on weak- 
nesses, direct additional resources and guidance to resolve those 
issues, and ultimately to substantially alleviate the security weak- 
nesses. 

The watch list provides more than department level visibility. 
Programs in and of themselves benefit from the measures inherent 
in the tool. For example, the department’s largest agency and the 
one with the most IT expenditures, the FAA, has programs that 
have been on the watch list and have therefore made changes. In 
particular, on April 18th, the Air Traffic Controllers Association 
kicked off its annual technical conference with a special session on 
the 0MB Exhibit 300, the basis on which capital programs are as- 
sessed and by which they make their way either on to or off of the 
watch list. 

At the ATCA meeting, a senior program manager indicated that 
being on the watch list forced him to be clearer about who the pro- 
gram’s customers were and how the program benefited those cus- 
tomers. That manager had to improve program justifications and 
results. Through the scoring process weaknesses identified in 
earned value management and life cycle costing required improved 
budgeting and planning. The manager responded by employing the 
useful segments approach. 

In effect, by being on the watch list, the program manager was 
forced to conduct a total program review — not just improve the 
business case to get off the watch list. This is an example of the 
watch list having a positive impact on an individual program man- 
ager. If we stack enough of these individual program success sto- 
ries together we can drive better results from our IT investments 
across the Government. 

As long as I am mentioning stacking these success stories to- 
gether, I offer the following suggestion, which I intend to pursue 
with 0MB and the Federal CIO Council. 

The Federal CIO Council can use agency-by-agency and subject 
area information to identify those agencies excelling, for example, 
in risk management and use those approaches as best practices. 
The Federal CIO Council would then focus efforts to help individ- 
ual agencies struggling in this area implement these best practices. 
Programs on the watch list should be expected, encouraged, and di- 
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rected to reach out for best practices, adapt and implement them, 
and be therefore more inclined to operate effectively. 

In conclusion, DOT believes OMB’s watch list is one important 
component of an overall management and oversight process which 
is valuable within the individual agencies and for 0MB. From its 
cross agency perspective 0MB sees the good and the bad. Let us 
keep the watch list and capture from that process our best prac- 
tices. It is my observation and experience at DOT that 0MB has 
been a willing and useful partner in helping more effectively man- 
age our IT resources. 

Again, I thank you for the opportunity to comment, and I look 
forward to answering your questions. Thank you. 

[The prepared statement of Mr. Matthews follows:] 
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Mr. Chairman and members of the Committee, thank you for the opportunity 
to appear today to discuss the Office of Management and Budget’s (0MB) 
“watch list.” 

As the Department’s Chief Information Officer (CIO), I oversee the U.S. 
Department of Transportation’s (DOT) information technology (IT) 
investment guidance, cyber security and operational responsibility for the 
Departmental network and communications infrastmcture. I also serve as 
the vice-chair of the Federal CIO Council. 

As I begin my remarks let me stipulate that the 0MB “watch list” is a 
management tool that DOT uses to gauge the effectiveness of our IT 
investment program. DOT recognizes that to comply with the Clinger- 
Cohen Act and other statutory requirements, external and internal oversight 
efforts necessitate creating “watch lists” for IT investments. OMB’s “watch 
list” happens to be well known throughout the Government, as it uses 
defined requirements in multiple categories to identify troubled programs 
and agency- wide challenges. OMB’s use of a published scoring approach 
creates a level playing field for Federal Agency initiatives. Any individual 
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program in any Departmental Agency may have deficiencies in any one or 
more measurement categories. Over the last several years, DOT has 
significantly reduced the number of our programs on OMB’s “watch list.” 

To address how OMB’s “watch list” has affected DOT’s operations, I noted 
that we use it as one of several critical management and oversight tools. 
DOT also uses Federal Information Security Management Act (FISMA) 
metrics. Inspector General and Government Accountability Office audit 
reports, and quarterly earned value management data reports to identify “at 
risk” programs. 

What differentiates the 0MB “watch list” and these other tools is that while 
unique concerns about an individual program may be raised in an audit 
report, the “watch lisf’ through its use of defined requirements in specific 
categories provides a “same measure” view from program to program. In 
short this “same measure” view allows us to see where we perform well and 
where we need to concentrate our efforts in order to strengthen our 
stewardship of the IT investments made in DOT. 

dot’s internal IT management and oversight controls, including the 0MB 
“watch list”, are used to designate under-performing investments as “at 
risk”. Either the Departmental Investment Review Board or the operating 
administration review board must review any “at risk” program. The 
reviewing board can direct corrective actions within a required timeframe, 
and can make a decision to modify, re-baseline, or possibly cancel the 
program. 
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Because the criteria for OMB’s “watch list” are applied across the 
Department’s investments, they help DOT focus on those critical program 
management issues that warrant agency-wide attention. For example, two 
years ago a significant number of DOT’s business cases found their way 
onto the “watch list” due to security weaknesses. DOT could have relied 
exclusively on FISMA-related metrics to increase management attention on 
our IT investments. Instead we used an accumulated effect approach, letting 
the business case scores, FISMA measures, and the weight of the President’s 
Management Agenda scorecard focus our attention on weaknesses, direct 
additional resources and guidance to resolve those issues, and ultimately to 
substantially alleviate the security weaknesses. 

The “watch list” provides more than Department level visibility. Programs 
in and of themselves benefit from the measures inherent in the tool. For 
example the Department’s largest agency and the one with the most IT 
expenditures, the FAA, has programs that have been on the “watch list” and 
have therefore made changes. In particular, on April 18"’, the Air Traffic 
Controllers Association (ATCA) kicked off its annual technical conference 
with a special session on the 0MB Exhibit 300, the basis on which capital 
programs are assessed and by which they make their way either onto or off 
of the “watch list”. 

At the ATCA meeting, a senior program manager indicated that being on the 
“watch list” forced him to be clearer about who the program’s customers 
were and how the program benefited those customers. That manager had to 
improve program justifications and results. Through the scoring process 
weaknesses identified in earned value management and life cycle costing 
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required improved budgeting and planning. The manager responded by 
employing the “useful segments” approach to program planning. In effect, 
by being on the “watch list,” the program manager was forced to conduct a 
total program review - not just improve the business case to get off the 
“watch list.” This is an example of the “watch list” having a positive impact 
on an individual program manager. If we stack enough of these individual 
program success stories together we can drive better results from our IT 
investments across the Government. 

As long as I am mentioning stacking these success stories together I offer the 
following suggestion, which I intend to pursue with 0MB and the Federal 
CIO Council. 



The Federal CIO Council can use agency-by-agency and subject area 
information to identify those agencies excelling, for example, in risk 
management and use those approaches as best practices. The Federal CIO 
Council would then focus efforts to help individual agencies struggling in 
this area implement these best practices. Programs on the “watch lisf’ 
should be expected, encouraged and directed to reach out for best practices. 
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adapt and implement them, and be therefore more inclined to operate 
effectively. 

In conclusion, DOT believes OMB’s “watch list” is one 
important component of an overall management and oversight process which 
is valuable within the individual agencies and for 0MB. From its cross 
agency perspective OMB sees the good and the bad. Let’s keep the “watch 
list” and capture from that process our best practices. It is my observation 
and experience at DOT, that OMB has been a willing and useful partner in 
helping more effectively manage our IT resources. 


Again, I thank you for the opportunity to comment on this important topic 
and I look forward to answering any questions that you may have. 
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Chairman Davis. Thank you, Mr. Matthews. 

Mr. McFarland. 

STATEMENT OF ROBERT MCFARLAND 

Mr. McFarland. Thank you, Mr. Chairman. I am pleased to ap- 
pear before this committee today, representing the Secretary and 
the department’s information technology program. 

Like other Federal agencies, VA submits b^udget materials to the 
Office of Management and Budget every year. As part of this an- 
nual process, VA documents and justifies its expenditures for its 
major IT investments. We do this on OMB’s form. Exhibit 300, the 
Capital Asset Plan. VA’s major IT investments will amount to 
nearly $2 billion in IT spending for fiscal year 2006. 

0MB reviews and evaluates our Exhibit 300’s against 10 criteria, 
with a top score of 5 for each of the criteria. All 10 criteria are list- 
ed in the Government Accountability Office’s draft report on the 
Exhibit 300 process as well as in 0MB Circular A-11, section 300. 

0MB created a management watch list to monitor Federal agen- 
cies’ major IT investments that fail to meet OMB’s standards for 
adequacy. When 0MB places a particular IT investment on the 
management watch list, the owner agency must take certain speci- 
fied actions, on a case-by-case basis depending on the investment, 
or submit remediation plans before spending the funds. 

We must modify our Exhibit 300 Capital Asset Plans to address 
OMB’s concerns with our business cases currently on the manage- 
ment watch list before we can spend fiscal year 2006 funds on 
those investments. I would like to note here that, as stated in the 
GAO report, if a score of 3 or less is received in the area of secu- 
rity, then the project is placed on the watch list. Consequently, we 
are focusing our energies and resources on meeting certification 
and accreditation requirements before the end of this fiscal year. 
The management watch list has also focused attention on VA’s 
other infrastructure-type efforts such as Enterprise Architecture. 

If we do not successfully remediate our business cases before fis- 
cal year 2006 begins, we are uncertain exactly what impact this 
will have on our day-to-day operations; however, we understand 
there will be increased scrutiny over all activities associated with 
the expenditures of funds for these particular investments. 

In closing, I would like to say that VA recognizes the importance 
of 0MB overseeing how we spend taxpayers’ funds. In the 14 
months I have been at the department, we have been looking at 
our major projects with a strong business eye and have added ex- 
ternal program assessments earlier in the life cycle. We look for- 
ward to continuing to strengthen VA’s IT Capital Asset Plans and 
our overall IT portfolio management process. 

I would be happy to answer any questions you may have later, 
sir. 

[The prepared statement of Mr. McFarland follows:] 
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Thank you, Mr. Chairman, I am pleased to appear before this Committee today, 
representing the Secretary and the Department’s information technology (IT) program. 

Like other Federal agencies, VA submits budget materials to the Office of Management 
and Budget (0MB) every year. As part of this annual process, VA documents and 
justifies expenditures for its major IT investments. We do this on OMB’s form - Exhibit 
300, the “Capital Asset Plan.” VA’s major IT investments will amount to nearly $2 
billion in IT spending for Fiscal Year 2006. 

0MB reviews and evaluates our Exhibit 300s against 10 criteria, with a top score of “5” 
for each of the criteria. All 10 criteria are listed in the General Accountability Office’s 
draft report on the Exhibit 300 process as well as in OMB Circular A-1 1 , section 300. 

OMB created a “management watch list” to monitor Federal agencies’ major IT 
investments that fail to meet OMB’s standards for adequacy. When OMB places a 
particular IT investment on the management watch list the owner agency must take 
certain specified actions - on a case-by-case basis depending on the investment - or 
submit remediation plans before spending the funds. 

We must modify our Exhibit 300 Capital Asset Plans to address OMB's concerns with 
our business cases currently on the management watch list before we can spend Fiscal 
Year 2006 funds on those investments. Consequently, we are focusing our energies and 
resources on meeting certification and accreditation requirements before the end of this 
fiscal year. The management watch list has also focused attention on VA’s other 
infrastructure-type efforts such as Enterprise Architecture. 

If we don’t successfully remediate our business cases before Fiscal Year 2006 begins we 
are uncertain exactly what impact this will have on our day-to-day operations; however. 
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we understand there will be increased scrutiny over all activities associated with the 
expenditures of funds for these particular investments. 

In closing, I would like to say that VA recognizes the importance of OMB overseeing 
how we spend taxpayers’ funds. In the 14 months I have been at the Department, we have 
been looking at our major projects with a strong business eye and have added external 
program assessments earlier in the life cycle. We look forward to continuing to 
strengthen VA’s IT Capital Asset Plans and our overall IT Portfolio Management 
process. 
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Chairman Davis. Thank you very much. 
Ms. Parkes. 


STATEMENT OF ROSITA O. PAR KE S 

Ms. Parkes. Thank you, Mr. Chairman and members of the com- 
mittee, for this invitation to appear before your committee today to 
discuss the 0MB investment management watch list. 

At the Department of Energy, the management watch list is an 
integral part of our continual efforts to ensure that IT investments 
meet their performance objectives within their established sched- 
ules and cost thresholds. Agencies understand that watch list in- 
vestments are of particular importance, and require special atten- 
tion and effort. I am proud to inform you that the Department of 
Energy does not currently have any investments on the watch list. 

Much of our success is attributable to our partnership with our 
DOE stakeholders, as well as our continual interaction with 0MB 
on watch list investments. With our DOE stakeholders, we devel- 
oped and institutionalized a well-defined set of criteria against 
which to measure progress. Further, we institutionalized regular 
communications with all levels of the organization throughout the 
process. 

The watch list initiative also yields benefits for DOE’s internal 
investment management and budgetary review process. Invest- 
ments on the watch list are carefully monitored, and their status 
is integrated into the department’s internal evaluation process, 
which aligns with the President’s management agenda. The watch 
list is a very useful tool to ensure that information technology in- 
vestments are tracked against cost, schedule, and performance. 

Thank you, and I will be happy to answer any questions that you 
might have. 

[The prepared statement of Ms. Parkes follows:] 
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April 21, 2005 

Thank you, Mr. Chairman, for your invitation to appear before the 
Committee today to discuss the OMB investment management Watch List 

At the Department of Energy, the investment management Watch List is an 
integral part of our continual efforts to ensure that IT investments meet their 
performance objectives within established schedules and cost thresholds. 
Agencies understand that Watch List investments are of particular 
importance, and require special attention and effort. I am proud to inform 
you that the Department of Energy no longer has any investments on the 
Watch List. 

Much of our success is attributable to our partnership with our DOE 
stakeholders, as well as otir continual interaction with OMB on watch list 
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investments. With our DOE stakeholders, we developed and 
institutionalized a well-defined set of criteria against which to measure 
progress. Further, we institutionalized regular communications with all 
levels of the organization throughout the process. 

The watch list initiative also yields benefits for DOE’s internal investment 
management and budgetary review process. Investments on the Watch List 
are carefully monitored, and their status is integrated into the Department’s 
internal evaluation process, which aligns with the President’s Management 
Agenda, The watch list is a useful tool to ensure that information 
technology investments are tracked against cost, schedule and performance. 

Thank you, Mr. Chairman, and I will be happy to answer any questions that 
you might have. 
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Mr. Marchant [presiding]. Thank you very much. 

Ms. Schlosser. 

STATEMENT OF LISA SCHLOSSER 

Ms. Schlosser. Mr. Chairman and members of the committee, 
thank you for the opportunity to appear today to discuss the effect 
of OMB’s watch list on the Department of Housing and Develop- 
ment’s operations. 

I have been the Chief Information Officer with HUD since Feb- 
ruary 2005. As the department’s CIO, I oversee HDD’s information 
technology investment management process, IT security program, 
and have operational responsibility for HDD’s network, commu- 
nications, and application hosting infrastructure. 

Our vision for HUD is to capitalize on the power of IT to support 
our primary business objectives of increasing home ownership, sup- 
porting community development, increasing access to affordable 
housing free from discrimination, and creating internal manage- 
ment efficiencies. HUD recognizes that we must institute effective 
IT capital planning and performance management controls to help 
us meet these business objectives. 

In formulating our strategy on how to continuously improve IT 
management controls, HUD has found that external oversight tools 
such as the President’s management agenda scorecard, the Federal 
Information Security Management Act scorecard, and the 0MB 
watch list have provided effective independent validations of 
prioritized areas for improvement. Specifically, having projects on 
the 0MB watch list has prompted us to conduct extensive con- 
versations with 0MB to establish how we could improve identified 
weaknesses. 

Based on this independent feedback, HUD has rapidly been im- 
plementing a plan to improve these specific areas agency-wide, and 
we are prioritizing the execution of these improvements in the 
projects identified on OMB’s watch list. For example, over the past 
several months HUD has improved our performance management 
process by reviewing all of our programs using earned value man- 
agement on a monthly basis, escalating programs that were exceed- 
ing cost or schedule goals to an executive review board for monitor- 
ing and oversight, and completing an enterprise architecture, and 
most importantly, accelerating our process to complete security cer- 
tification and accreditation of our systems. 

In sum, HUD is capitalizing on various oversight tools such as 
the President’s management agenda, the FISMA scorecard, and the 
0MB watch list to identify opportunities for agency-wide process 
improvements in the way we manage our critical IT investments. 
We are committed to implementing these improvements and antici- 
pate that many programs will be removed from the 0MB watch list 
over the next year. Most importantly, through the use of the watch 
list and other internal and external oversight tools, HUD will en- 
sure that our IT investments effectively support our core business 
requirements. 

I thank the committee for its attention. I look forward to your 
questions. 

[The prepared statement of Ms. Schlosser follows:] 
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Chairman Davis, Ranking Member Waxman, and distinguished Members of the 
Committee, thank you for the opportunity to appear today to discuss the effect of OMB’s 
Watch List on the Department of Housing and Development’s (HUD’s) operations. 

I have been the Chief Information Officer (CIO) with HUD since February 2005. As the 
Department’s CIO, I oversee HUD’s Information Technology (IT) investment 
Management process, IT security program, and have operational responsibility for 
HUD’s network, communications, and application hosting infrastructure. 

1 would like to take a few moments to introduce my background. Prior to my assignment 
with HUD, I served for over three years as the Associate Chief Information Officer, 
Investment Management/Chief Information Security Officer for the US Department of 
Transportation. In this role, I was responsible for the capital planning and investment 
control program, the enterprise architecture program, and the IT security program. Prior 
to my time with DOT, I was a consultant with various organizations to include Ernst & 
Young. I started my career as a US Army Military Intelligence Officer and continue to 
serve in the US Aimy Reserves at this time. 

My vision is for HUD to capitalize on the power of information technology (IT) to 
support our primary business objectives of increasing home ownership, supporting 
community development, increasing access to affordable housing free from 
discrimination, and creating internal management efficiencies. While I know there have 
been some concerns in the past regarding the management of IT within HUD, I am 
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confident that we are well positioned to aggressively move forward and to rapidly show 
improved results in IT management, based on my previous experience with DOT, along 
with the final, successful resolution of the HUD Information Technology Services 
contract. In fact, over the past two months, we have already successfully modernized 
several legacy HUD mainframe systems; transitioned hundreds of business critical 
applications to our new state-of-the-art data center; migrated to a best practice human 
resource system and are reducing redundant systems; and have accelerated several key 
security initiatives. 

Despite this progress, HUD also recognizes that we must continue to institute improved 
and effective IT capital planning and performance management controls to ensure that IT 
investments support our business goals. 

HUD is capitalizing on various independent reviews of these controls, such as those 
provided through the Federal Information Security Reform Act (FISMA) Scorecard, 
Inspector General and General Accounting Office Reports, the President’s Management 
Agenda, and the 0MB Watch List, to improve our IT processes. The 0MB Watch List, 
which is based on an evaluation of HUD’s major IT programs using a clearly defined set 
of best practice criteria, has assisted us in evaluating the current state of our IT 
management controls, and has helped us to clearly identify at-risk programs and agency- 
wide challenges. The tool has also helped HUD to prioritize and focus resources to 
resolve the most critical issues facing the effective management of IT, and has been the 
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driver in our establishment of an aggressive agency-wide plan to improve the 
management oversight of our IT investments over the next year. 

The primary reason HUD’s projects are on the 0MB Watch List is that security 
certification and accreditation, a key 0MB and legislative requirement, has not been 
completed. Consequently, I am focusing first and foremost on instituting an effective 
information technology security program. The key actions we are taking to improve this 
program are as follows. First, we have developed a comprehensive, updated security 
policy and standard guidelines for inventory management, certification/accreditation, and 
the plan of action and milestone (POA&M) process. Second, we are on schedule to 
complete certification and accreditation on the majority of HUD systems by the end of 
the year. Third, we are scheduled to complete specialized security training for all 
technical personnel within the next three months. Finally, we are in the process of 
implementing a formalized cyber security incident response and vulnerability testing 
center by the end of July. Most importantly, we are coordinating with our Inspector 
General to continue to improve our security program in conjunction with the FY2005 
FISMA evaluation and reporting process. 

In addition to these critical activities, we have also implemented a target enterprise 
architecture and associated modernization strategy that has been approved by HUD’s 
Technology Investment Review Board Executive Committee (TIBEC). The TIBEC 
serves as HUD’s internal IT management and oversight control board. The TIBEC is 
responsible for establishing and enforcing the IT modernization strategy for HUD. The 
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TIBEOhas identified several key opportunities to improve management efficiencies and 
reduce redimdant IT systems, and these actions are already being executed. For example, 
HUD recently migrated our human resource system to a government-wide solution and is 
in the process of retiring or reengineering multiple outdated systems. The TIBEC, 
starting in June, will also uses tools such as the 0MB Watch List to actively monitor “at 
risk” IT programs, and will direct these programs to develop and implement corrective 
actions. The TIBEC will monitor these actions and make decisions to modify, re- 
baseline, or to delay new funding on the programs until corrective actions are taken. 

In terms of improving performance-based management, we now require monthly 
reporting of cost and schedule actuals and earned value through an update of the project 
plan for all major IT programs. Cost and schedule variances are calculated for each 
individual project each month, and projects that have significant variances are required to 
submit a corrective action plan. The HUD TIBEC, as mentioned above, is now also 
scheduled to meet quarterly to review projects that exceed acceptable cost or schedule 
goals. Our strategy for moving forward is to include standard earned value management 
reporting language in new contracts supporting major IT development projects. 

In sum, HUD is capitalizing on the 0MB Watch List as an important component of our 
IT management and oversight process. The Watch List has already helped us to identify 
opportunities for agency-wide process improvements in the way we manage our critical 
IT investments. We are committed to implementing these improvements and anticipate 
that many programs will be removed from the OMB Watch List over the next year. Most 
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importantly, through the use of the Watch List and other internal and external oversight 
tools, HUD will ensure that our IT investments are well managed and effectively support 
our core business requirements. 

I thank the Committee for its attention and I took forward to your questions. 
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Mr. Marchant. Thank you very much. The chairman wished for 
me to extend his apologies. We are in the midst of the energy bill 
on the House floor, there are 16 amendments being debated and 
worked on at this very moment, and this committee has some im- 
portant parts of that bill. 

I have a few questions for each of you. Ms. Parkes, in your testi- 
mony you noted that you currently have no projects on the watch 
list. What steps did you take to get projects removed? Or have you 
not had any? 

Ms. Parkes. Oh, we had projects on the watch list, sir. In budget 
year 2005, we had 45 out of 68 of our projects on the watch list, 
and in budget year 2006, 12 out of 48. 

What we did was, first of all, we worked with our program of- 
fices — I do need to note that most of the business cases that are 
developed in the Department of Energy are not developed in the 
headquarters, they are developed by our site offices at our sites. So 
what we did was we, first of all, worked with our program offices 
that are responsible for the sites. We trained up front on business 
case development; we literally held hands with our program offices 
and the project managers responsible for generating the business 
cases. We created an internal scorecard that mirrored the 0MB 
scorecard so that we could identify early the weaknesses that were 
in the business cases before we passed them over to 0MB. And 
then once they went to 0MB and where the scores were indeed 
weak in certain areas, we came back and used a remediation proc- 
ess, again holding hands with the project managers and the pro- 
gram offices to ensure that those weaknesses, the content of the 
business case, those weaknesses were strengthened. So we did that. 
And we continue to do that. We continue to provide training, we 
continue to use our information technology council and various 
working groups to help get those business cases, where they need 
remediation, remediated. 

Mr. Marchant. And what incentives or disincentives are given 
to get these off the watch list? Is there a “or else,” or is there a 

Ms. Parkes. The Department of Energy has a management coun- 
cil that consists of the assistant secretaries and is chaired by the 
deputy secretary and review of the entire President’s management 
agenda occurs at this monthly management council meeting. And 
the review of the e-Gov initiative under the PMA is part of that 
management agenda and business cases that are on the watch list 
are reviewed monthly by the assistant secretaries. So there is dep- 
uty secretary attention to the watch list. 

And also, quite frankly, the watch list is part of our corporate 
budget review. So, as Ms. Evans stated earlier, within the agency 
as well as at 0MB, funding is at risk if that watch list business 
case does not get remediated. So that is an incentive I think, you 
too? 

Mr. Marchant. Yes, I think so. Ms. Schlosser, with your experi- 
ence at the DOT, what best practices are you bringing to HUD? 

Ms. Schlosser. I was fortunate to serve with my colleague Mr. 
Matthews as an associate CIO with DOT and was able to observe 
a lot of best practices DOT has put in place. We have already 
adopted and implemented several of those practices at HUD over 
the past couple months. One, we have implemented and updated 
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performance measurement process and, like Ms. Parkes, we are re- 
viewing all of our projects on a monthly basis with an internal ex- 
ecutive review board chaired by our deputy secretary so we can 
identify any projects that are heading toward a variance in cost 
and schedule. 

Second, we have completed enterprise architecture to make sure 
that all of our investments meet our primary business objectives. 
Third, and perhaps most importantly, we have accelerated a proc- 
ess using best practice methodologies to complete security certifi- 
cation and accreditation of our systems. We feel that by adopting 
and implementing these best practices we are positioned to really 
improve our IT management and controls internally, and, in fact, 
have already done so. Thank you, sir. 

Mr. Marchant. Thank you. 

Mr. Matthews, is the Federal CIO Council offering any advice to 
agencies on how to get projects removed from the watch list? 

Mr. Matthews. This year, sir, the CIO Council stood up a best 
practices form into which the participating agencies can put their 
best practices. That is being made available to the agencies online 
as well as contact information, so one agency can call another. I do 
believe that we can capture more best practices by identifying 
those agencies that are consistently green in one of those criteria 
areas, post them to the Web site, and then work with the agencies 
to help them install those best practices. So the facility is there and 
we look forward to working with the agencies to raise all boats 
with that single tide. 

Mr. Marchant. Do you find that agencies that begin to have 
problems go through a period of not wanting those problems to ex- 
actly be known by other agencies at the very beginning, and they 
might try to solve their own problems for a while before they fi- 
nally admit we have a problem here, we need help? 

Mr. Matthews. Yes, sir, I believe human nature drives us to try 
and solve our own problems. But certainly by publishing best prac- 
tices, part of that I would envision CIOs just reaching out to that 
data base to see what is there and then calling a fellow CIO and 
saying, hey, how did you go about doing this? I think we are trying 
to facilitate that so people can reach out and get expert opinions 
and advice without the need to feel unwanted pressure or recrimi- 
nations for trying to solve problems. 

Mr. Marchant. Mr. McFarland, are there unique challenges at 
the VA that other agencies do not face that you feel like you are 
having to face? 

Mr. McFarland. Well, after 14 months, sir, I would say yes. 
First off, I think it is fair to say we are a work in progress. We 
are the second largest agency in Government, about 230,000 em- 
ployees, another 200,000 contractors. So scale is a huge problem for 
us. And as we have run into problems, the scale of those problems 
is quite a management challenge. We also suffer from lack of cen- 
tralized management, which we are investigating a change on. 

But we are basically a large decentralized organization with 
funding directly to those organizations. We suffer from what I 
would call large legacy IT programs that truly need to be taken out 
of the stovepipe manner and put into some degree of enterprise ar- 
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chitecture, which we have not done a good job of developing over 
the last few years. 

We have also suffered from what I would call lack of program 
management. We are in the process of establishing an enterprise 
project management office very similar to what DOD uses to man- 
age large, complex projects. Because many of our projects are $100 
million projects, not $10 million projects, the risk that we run by 
not managing them properly is a huge financial risk. 

But I believe that with the current management team in place, 
and the benefit of having I would consider the Government’s best 
mission, which is to take care of our veterans, I think we have a 
lot of incentive to change the way we have managed the agency in 
the past from an IT perspective and move forward with some 
change. 

Mr. Marchant. I think I will just ask one more followup ques- 
tion before we conclude. You heard the earlier discussion between 
0MB and GAO. Do you have feelings about whether there ought 
to be a published list, or do you feel like the way it is being han- 
dled now is preferable to the agencies? 

Mr. Matthews. I believe sharing the information so that we can 
garner the best practices is in the interest of the Federal Govern- 
ment. The use of the term “publish” remains to be seen how far we 
publish it. Do we list, for instance, if security is a measure, do we 
actually want to publicly list these major programs and whether 
they have “security problems” or not. Probably that is not in our 
best interest. But taking the information and stacking it together 
so we can find those areas that have routinely performed well and 
capitalize on them I believe is something that we should do. 

Mr. Marchant. I would like to thank both panels for appearing 
today. The chairman has asked me to thank you for being here. We 
look forward to having you appear before the committee again. 

The committee now stands adjourned. 

[Whereupon, at 11:17 a.m., the committee was adjourned.] 

[The prepared statement of Hon. Elijah E. Cummings follows:] 
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Opening Statement 
Elijah E. Cummings 

Full Committee Hearing entitled, “0MB Management Watch List: $65 Billion Reasons 
to Ensure the Federal Government is Effectively Managing Information Technology 

Investments.” 

Committee on Government Reform 
U.S. House of Representatives 
109''' Congress 

Thursday, April 21, 2005 
10:00 a.m. 

Room 2154 Rayburn House Office Building 


Thank you Mr. Chairman for calling this critically important 
hearing on the Office of Management & Budget’s (0MB) 
utilization of their Management Watch List (Watch List) to 
evaluate the federal government’s efforts to manage its 
information technology (IT) investments. 

The president’s fiscal year 2006 budget proposes that the 
federal government invest approximately $65 billion for 1,087 
information technology projects. This represents a level of 
investment that is approximately 5 times more than what the 
President proposes for Title I under the No Child Left Behind 
Act, and approximately 9 times more than what the President 
proposes for Head Start 

At this time of great national need, citizens from urban centers 
to the heartland are calling for substantial increases in federal 
funding for education, healthcare, housing, and law 
enforcement, to just name a few national priorities. 
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Given this reality, the federal government can ill afford to 
poorly utilize its limited resources by poorly managing its IT 
projects. To help ensure that the federal government manages 
its IT investments effectively and efficiently, Congress passed 
the Clinger-Cohen Act. This legislation mandates that 0MB 
evaluate the risks and results of significant capital investments 
made by federal agencies in IT projects. 

0MB stated in previous hearings before this Committee that it 
places major federal agency IT projects on a Watch List that 
“need to improve performance measures, project management, 
and/or IT security.” Of the 1,087 IT projects included in the 
President’s fiscal year 2006 budget, 342 projects are placed on 
OMB’s Watch List totaling approximately $15 billion. 

Concerns have been raised about the efficacy of OMB’s Watch 
List to successfully carry out the charge granted to it under the 
Clinger-Cohen Act. A central challenge the GAO identified in 
its report entitled “Information Technology; 0MB Can Make 
More Effective Use of Its Investment Reviews” is OMB’s 
failure to have a comprehensive Watch List of deficient IT 
projects. 

This has led to a troubling problem. For fiscal year 2005, 0MB 
placed 621 IT projects totaling approximately $22 billion on its 
Watch List. According to the GAO, 0MB was incapable of 
identifying which of these 621 projects received corrective 
action because it did not maintain a comprehensive Watch List. 
The GAO found that if OMB maintained such a list it would be 
in a better position to improve its analysis of IT projects and 
evaluate corrective actions taken by federal agencies to address 
weaknesses in identified Watch List projects. 
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Mr. Chairman, as the title of this hearing conveys, there are 
$65 billion reasons why we should all care about how 
effectively and efficiently the federal government uses the 
money it dedicates to its IT projects. In the end, however, the 
American people expect us to do more than just care — ^they 
expect us to achieve results. 

With that said, I look forward to the testimony of today’s 
witnesses and any insight that can help us better manage the 
federal government’s multi-billion dollar investment in 
information technology. 

I yield back the balance of my time. 
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STATEMENT FOR THE RECORD 
CONGRESSMAN JON PORTER (NV-3) 

“OMB Management Watch List: $65 Billion Reasons to Ensure the Federal 
Government is Effectively Managing Information Technology Investments” 
April 21, 2005 

Mr, Chairman, I appreciate your holding this hearing today. I would also like to thank the 
witnesses for taking the time to be here with us today. 

The purpose of this hearing today is to discuss the Office of Management and Budget’s 
(OMB) Watch List to review information technology (IT) investments. In reading the 
background information provided by the Committee on this hearing, I was surprised at 
the sheer number of programs that are on the OMB’s Watch List. Slightly over half of 
this nation’s IT projects, equating to approximately $22 billion, were on this list. Next 
year’s budget includes 1,087 projects, totaling approximately $65 billion, to which the 
OMB reports that 342 of these projects are on the Watch List. 

Mr. Chairman, as a lawmaker and a taxpayer, these numbers are very concerning. 
Although I join the other members of this Committee in commending OMB for 
developing this management tool to review IT investments, I am looking forward to 
hearing why the Committee has not been updated by OMB on which of these 
approximately 600 projects have received follow-up attention. I would also appreciate 
some clarification as to whether OMB will be effective on corrective actions that the 
different agencies have undertaken to address problems with Watch List projects. 

We are not here today to criticize the OMB regarding this Watch List— we are here today 
to help resolve problems and make sure that our taxpayers’ dollars are used to the fullest 
extent, I believe that the OMB could be beneficial in helping to identify management 
issues that pertain to agencies and to make sure that the problems associated with the 
Watch List do not continue. 

Again, Mr. Chairman, thank you for holding this hearing today, and I look forward to 
hearing the witnesses speak. 
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